A new information-stealing malware called ZingoStealer has been discovered with powerful data-stealing features and the ability to load additional payloads or mine Monero. [...]  ( 4 min )

The Treasury Department's Office of Foreign Assets Control (OFAC) has updated its Specially Designated Nationals (SDN) list with new information linking the North Korean-backed Lazarus Group APT to the largest cryptocurrency hack in history. [...]  ( 3 min )

Atlassian has finally revealed the exact cause of an ongoing cloud services outage the company estimates could impact some of its customers for up to two more weeks. [...]  ( 3 min )

Hackers are targeting Ukrainian government agencies with new attacks exploiting Zimbra exploits and phishing attacks pushing the IcedID malware. [...]  ( 3 min )

Hetzner Online GmbH, a German cloud services provider, told some customers this week that their data had been irreversibly lost and were provided a 20€ compensation in online credit. [...]  ( 4 min )

To better understand how to protect passwords in your environment from attacks, let's look at the top 10 password attacks and see what your organization can do to prevent them. [...]  ( 7 min )

A platform for everyone to seamlessly share their best moments online, Instagram is slowly turning into a mecca for the undesirables—from sexual harassers to crypto "investors" helping you "get rich fast." How do you keep yourself safe against such profiles? [...]  ( 7 min )

A security flaw in the Rarible NFT (non-fungible token) marketplace allowed threat actors to use a relatively simple attack vector to steal digital assets from the target's accounts and transfer them directly to their wallets. [...]  ( 4 min )

OldGremlin, a little-known threat actor that uses its particularly advanced skills to run carefully prepared, sporadic campaigns, has made a comeback last month after a gap of more than one year. [...]  ( 5 min )

OldGremlin, a little-known threat actor that uses its particularly advanced skills to run carefully prepared, sporadic campaigns, has made a comeback last month after a gap of more than one year. [...]  ( 5 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has added ten new security bugs to its list of actively exploited vulnerabilities, including a high severity local privilege escalation bug in the Windows Common Log File System Driver. [...]  ( 4 min )

African banks are increasingly targeted by malware distribution campaigns that employ HTML smuggling tricks and typo-squatted domains to drop remote access trojans (RATs). [...]  ( 4 min )

Thank you for joining us on “The cloud hub: From cloud chaos to clarity.” Data privacy and security must be built into the data, technology, and governance mechanisms underpinning a mergers and acquisitions deal, rather than being an afterthought. This can promote increased customer confidence, improved regulatory approval rates, and a healthy balance sheet. Click…  ( 1 min )

Thank you for joining us on “The cloud hub: From cloud chaos to clarity.” Watch Daniel Dines, co-founder and CEO, UiPath Automation, speak with Ravi Kumar S, president, Infosys, on the future of automation and its role in enhancing human achievement. Click here to continue.  ( 1 min )

The venture capital firm Lowercarbon Capital has raised a $350 million fund dedicated to carbon removal startups, in another sign of the surging interest in a space that barely existed a few years ago. The goal of the new fund, which MIT Technology Review is reporting exclusively, is to accelerate the development and scale-up of…  ( 4 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. How mobile money supercharged Kenya’s sports betting addiction Mobile money has mostly been hugely beneficial for Kenyans. But it has also turbo-charged the country’s sports betting sector. Since the middle of the last…  ( 4 min )

Hitchhiking in the cab of a sand truck late one Saturday night in 2018, Bill Kirwa had almost forgotten about the bet. The wager he’d placed that afternoon had been a long shot: to win, he’d need to correctly pick which team was ahead, at both halftime and full time, in four soccer matches on…  ( 12 min )

Web Services division plans to erect 2 bit barns an hour from San Fran Amazon is continuing to expand its global datacenter footprint, this time with a proposed new facility in the Golden State, to meet the growing demand for its cloud compute services.…  ( 8 min )

Demand remains high for CPUs, GPUs and automotive chips, says TSMC CEO Taiwanese foundry giant TSMC can't make enough chips for its customers, but that isn't stopping the company from making bank on the silicon it can churn out.…  ( 8 min )

Europe's great cloud hope is growing but AWS, Microsoft and Google won't be losing sleep.... yet OVHcloud, Europe's closest approximation to a hyperscaler, says it has lifted revenue guidance for the year off the back of growing enterprise demand for a sovereign cloud – but Microsoft, AWS and Google likely won't be too troubled yet.…  ( 8 min )

South Korea the big winner in a year of supply struggles and continued shortages Despite (and perhaps because) of ongoing shortages, the semiconductor industry posted $595 billion in revenue in 2021, an increase of 26.3 percent over 2020.…  ( 8 min )

Ammonia as a viable, sustainable alternative to fossil fuels – and current fertilizer Fujitsu has signed an agreement with Atmonia to deliver HPC and AI technology for the development of catalysts to drive the clean production of ammonia, which is being touted as an alternative to fossil fuels.…  ( 9 min )

US security agencies say the tools can give hackers control of ICS and SCADA devices Hackers have created custom tools to control a range of industrial control system (ICS) and supervisory control and data acquisition (SCADA) devices, marking the latest threat to a range of critical infrastructure in the United States, according to several government agencies.…  ( 9 min )

Day 10 of ongoing disruption: Have some sympathy for admins, it's a difficult read Who, Us?  Atlassian has published an account of what went wrong at the company to make the data of 400 customers vanish in a puff of cloudy vapor. And goodness, it makes for knuckle-chewing reading.…  ( 8 min )

$54.20 per share in cash so that Musk can help 'unlock' its 'potential' The Twitter, Elon Musk saga has taken another turn, with the tech billionaire tabling an offer of $54.20 per share to buy the service outright.…  ( 8 min )

IBM kit made 20 journeys into space, now selling for surprisingly down-to-Earth prices Boston-based auction house RR Auction currently has an out of this world item up for bid: IBM computers collectively used aboard twenty Space Shuttle missions.…  ( 8 min )

Vendors didn't 'diversify' adoption beyond education, CIOs flirted with form factor and nothing more Crashing Chromebook shipments caused the global PC market to shrink for the first time since the pandemic began.…  ( 8 min )

Payloads pulled as Europe eyes alternatives The European Space Agency (ESA) has pulled back from yet more "cooperative activities" with Russia as the agency continues to adjust to life without its former partner.…  ( 8 min )

Govt org that led controversial Palantir data store seeks overarching system and help to improve services NHS England is planning the procurement of a data platform with up to £240m million ($312 million) on the table to help in re-organization of the health service and recovering from the COVID-related backlog in care.…  ( 9 min )

Far from cheap but discounts could put HoloLens in closer reach for schools The HoloLens 2 has been around long enough some might see a reduction in the often-cited high pricetag. In this case, it's educational institutions eligible for a 10 percent price cut.…  ( 9 min )

All so that it can maintain backdoor access across reboots The China-linked Hafnium cyber-gang is using a strain of malware to maintain a persistent presence in compromised Windows systems by creating hidden tasks that maintain backdoor access even after reboots.…  ( 10 min )

Aims to reach a billion users with expanded cloud, and lots of cartoon content Korean web portal Naver – which enjoys 18 per cent share of the search market in its home nation – has unveiled plans to expand its business product portfolio and secure a billion global users.…  ( 9 min )

Founder's daughter is married to top UK politician, holds billion dollar stake that was maxed for tax efficiency Indian IT services giant Infosys has announced it will quit Russia, after finding itself at the center of a political storm in the UK.…  ( 9 min )

Big Blue contends it should not be forced to reveal more than law requires IBM has been accused of trying to avoid its legal discovery obligations in Kinney v. IBM, one of many age discrimination lawsuits that have been brought against the IT titan in the past few years.…  ( 11 min )

Yitian 710 chip boasts 128 Armv9 cores, available to test Alibaba Cloud has started accepting requests from customers to preview an instance type powered by the home-grown Arm CPUs it revealed last year.…  ( 9 min )

Miscreants Googled for post-intrusion tools before downloading them onto servers, PCs Lockbit ransomware operators spent nearly six months in a government agency's network, deleting logs and using Chrome to download hacking tools, before eventually deploying extortionware, according to Sophos threat researchers.…  ( 11 min )

Meta will für seinen Messenger-Dienst Whatsapp eine "Communities"-Funktion starten – mit dieser sollen künftig auch verschlüsselte Gruppenanrufe möglich sein.  ( 4 min )

Kurz informiert liefert täglich die wichtigsten Nachrichten zu IT, Mobilem, Gadgets, Netzpolitik & Wissenschaft.  ( 4 min )

Die Verwendung erneuerbarer Stromquellen soll sich über das letzte Jahr verdoppelt haben. Über 200 Zulieferer wollen nur noch grüne Energie nutzen.  ( 4 min )

Mit der Version 21.11 bringt Collabora seine Apps auf den aktuellen Stand. Teil des Updates sind einige Funktionen speziell für Mobilgeräte.  ( 3 min )

Am 18. Mai findet ein Webinar zu Threat Modeling statt. Vorher hilft am 26. April ein halbtägiger Online-Thementag beim Absichern der Software Supply Chain.  ( 4 min )

Das Heidelberger Unternehmen bietet Nutzern mit LUMINOUS die Option, komplexe Texte zu verarbeiten, zu analysieren oder selbst zu produzieren.  ( 4 min )

Der Social-News-Aggregator Reddit hat seine Suchfunktion erweitert: Neben Beiträgen, Nutzern und Communities sind nun auch Kommentare durchsuchbar.  ( 3 min )

Die Vorabkompilierung über Native AOT nimmt weiter Gestalt an, und die Preview verbessert die Startzeiten im Write-Xor-Execute-Betrieb.  ( 5 min )

Schneller als ein Mac Pro, so groß wie zweieinhalb Mac mini: Wir besprechen, was Apples neuer Mac Studio und das Studio Display im Einsatz leisten.  ( 3 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem TestRail, Harbor, Quarkus, Volcano, Nepho und Apache SkyWalking.  ( 3 min )

Das Update Git v2.35.2 soll die von GitHub gemeldete Schwachstelle CVE-2022-24765 beheben.  ( 3 min )

Angreifer könnten Systeme mit der Datenvisualisierungssoftware Grafana Enterprise attackieren.  ( 3 min )

Elon Musk will Twitter komplett übernehmen und alle Aktien kaufen. Erst vor wenigen Wochen war er größter Aktionär geworden.  ( 5 min )

Eigentlich sollte Ethereum noch im zweiten Quartal 2022 vom stromhungrigen Proof of Work zu sparsamem Proof of Stake umsteigen. Doch das verzögert sich erneut.  ( 5 min )

Mit IQ for Sales bietet Zoom nun eine Überwachung der Verkäuferleistung bei Anrufen. KI-Sprachanalysen sollen die Kundenerfahrung verbessern.  ( 4 min )

Das Videoportal Tiktok hat im vergangenen Quartal mehr als 15 Millionen Konten Minderjähriger entfernt – und insgesamt mehr als 24 Millionen Videos.  ( 4 min )

Es gibt wichtige Sicherheitsupdates für IBM Db2, IBM Db2 On Openshift und IBM Db2 Warehouse on Cloud Pak for Data.  ( 3 min )

Angreifer schieben Krypto-Miner durch eine kritische Schadcode-Lücke in VMware Identity Manager und Workspace One Access. Updates stehen zum Download bereit.  ( 3 min )

SUSE überlegt offenbar, die seinem Enterprise Linux zugrunde liegende Architektur neu zu organisieren. Erste Infos gab es jetzt auf der openSUSE-Mailingliste.  ( 4 min )

Mehrere Sicherheitslücken machen Endpoint Management, Gateway, SD-WAN und Storefront von Citrix angreifbar. Abgesicherte Versionen sind verfügbar.  ( 3 min )

In Shanghai, Kushon und anderswo im Reich der Mitte greift der Staat weiter zur harten Zero-COVID-Politik. Das hat Auswirkungen auf Apple-User.  ( 4 min )

Mit einem Werkzeugkasten hochentwickelter Cyberwaffen sollen unbekannte Angreifer industrielle Steuerungslagen übernehmen können. Davor warnen US-Behörden.  ( 4 min )

Bis zu viermal schneller als ein iMac Pro mit Intel-Chip soll Version 22.3 des Videowerkzeugs auf Apple Silicon nun sein.  ( 4 min )

Das als vorkonfigurierte Appliance konzipierte Turnkey Linux wechselt beim Unterbau auf Debian 11. Aus der Community stammt ein Preview für den Raspberry Pi 4.  ( 4 min )

Bereitstellung, Geräteverwaltung, User Enrollment, BYOD: Das Live-Webinar erklärt, was bei der Einbindung von iOS-Geräten im Firmenumfeld möglich ist.  ( 4 min )

Nutzer von GitHub Actions und Codespaces haben eine Mail bekommen, die für erhöhten Puls gesorgt haben dürfte. Schuld war ein technischer Fehler bei GitHub.  ( 4 min )

Der Ukraine-Krieg findet nicht nur innerhalb der Ukraine, sondern auch online statt. Was ist bisher geschehen, was droht noch? Das besprechen wir um 12 Uhr.  ( 4 min )

Energieversorger erläutern ihre Rechnungen gerne anhand anonymisierter Muster-PDFs. In einigen fanden wir Rückstände von Kundendaten.  ( 5 min )

A U.S. court has sentenced former Ethereum developer Virgil Griffith to five years and three months in prison and pay a $100,000 fine for conspiring with North Korea to help use cryptocurrencies to circumvent sanctions imposed on the country. "There is no question North Korea poses a national security threat to our nation, and the regime has shown time and again it will stop at nothing to ignore  ( 3 min )

A threat group that pursues crypto mining and distributed denial-of-service (DDoS) attacks has been linked to a new botnet called Enemybot, which has been discovered enslaving routers and Internet of Things (IoT) devices since last month. "This botnet is mainly derived from Gafgyt's source code but has been observed to borrow several modules from Mirai's original source code," Fortinet  ( 3 min )

Cybersecurity researchers have disclosed a now-fixed security flaw in the Rarible non-fungible token (NFT) marketplace that, if successfully exploited, could have led to account takeover and theft of cryptocurrency assets. "By luring victims to click on a malicious NFT, an attacker can take full control of the victim's crypto wallet to steal funds," Check Point researchers Roman Zaikin, Dikla  ( 3 min )

Microsoft and a consortium of cybersecurity companies took legal and technical steps to disrupt the ZLoader botnet, seizing control of 65 domains that were used to control and communicate with the infected hosts. "ZLoader is made up of computing devices in businesses, hospitals, schools, and homes around the world and is run by a global internet-based organized crime gang operating malware as a  ( 4 min )

The U.S. government on Wednesday warned of nation-state actors deploying specialized malware to maintain access to industrial control systems (ICS) and supervisory control and data acquisition (SCADA) devices. "The APT actors have developed custom-made tools for targeting ICS/SCADA devices," multiple U.S. agencies said in an alert. "The tools enable them to scan for, compromise, and control  ( 4 min )

A week after VMware released patches to remediate eight security vulnerabilities in VMware Workspace ONE Access, threat actors have begun to actively exploit one of the critical flaws in the wild. Tracked as CVE-2022-22954, the critical issue relates to a remote code execution vulnerability that stems from server-side template injection in VMware Workspace ONE Access and Identity Manager. The  ( 2 min )

Angreifer könnten Systeme mit der Datenvisualisierungssoftware Grafana Enterprise attackieren.  ( 3 min )

Es gibt wichtige Sicherheitsupdates für IBM Db2, IBM Db2 On Openshift und IBM Db2 Warehouse on Cloud Pak for Data.  ( 3 min )

Angreifer schieben Krypto-Miner durch eine kritische Schadcode-Lücke in VMware Identity Manager und Workspace One Access. Updates stehen zum Download bereit.  ( 3 min )

Mehrere Sicherheitslücken machen Endpoint Management, Gateway, SD-WAN und Storefront von Citrix angreifbar. Abgesicherte Versionen sind verfügbar.  ( 3 min )

Whether you work in-house or run a digital agency, there are occasions when you will consider hiring freelancers to supplement your team. Today, we’ll take a look into a platform known as [Upwork](https://upwork.pxf.io/c/1221738/1245573/13634) and the best ways in finding the the right freelancers as well as integrating them into your team.  ( 8 min )

But this time the patch should do the trick Apache has taken another shot at fixing a critical remote code execution vulnerability in its Struts 2 framework for Java applications – because the first patch, issued in 2020, didn't fully do the trick.…  ( 9 min )

Fees for sellers of virtual goods in Horizon Worlds will be almost half of sale price Meta intends to charge content creators as much as 47.5 percent of revenue from the sale of digital assets that touch its Meta Quest Store and virtual-reality service Horizon Worlds, more even than Apple's "30 percent App Store tax" that the firm's Facebook subsidiary has decried.…  ( 9 min )

Better support for top ML frameworks means stronger chip competition Good news for those who like their AI chips big: Cerebras Systems has expanded support for the popular open-source PyTorch and TensorFlow machine-learning frameworks on the Wafer-Scale Engine 2 processors that power its CS-2 system.…  ( 9 min )

Greenwashing or serious commitment? Intel has committed to being net zero for greenhouse gas emissions across its global operations by 2040, and has set itself interim milestones for 2030 including 100 percent renewable electricity use and to identify greener chemicals with lower global warming potential.…  ( 9 min )

Years of extended delays and changes for late 2022-planned system Intel is expected to provide next-gen CPUs and GPUs for what will become one of the world's fastest supercomputers later this year, but when the United States' long-delayed Aurora project is finally up and running, it will happen without a top Intel architect who was key to its delivery.…  ( 9 min )

Julia replaces Fortran as the basis for Earth's new digital twin When faced with climate models coded in Fortran in the 1960s and 70s, MIT decided there wasn't any more cobbling together left for the ancient code, so they decided to toss it out and start fresh. …  ( 9 min )

Addresses 'top reported issues'.. apart from that whole C++ thing Microsoft has made available an updated preview of Visual Studio 2022 for Mac, addressing what it described as the "top reported issues" in preview 9.…  ( 8 min )

Tightening of IP laws to prevent poaching seen by Beijing as 'provocative smear' Trouble is brewing over moves by Taiwan to prevent China from gaining access to its chip technology, as the island nation proposes tougher laws to deter the leaking of trade secrets outside the country.…  ( 8 min )

Tough news for those Googlers still holding out for permanent remote work Google is betting big on the future of the office with $9.5 billion in investments planned for such facilities in 2022. …  ( 8 min )

Keksec malware used for DDoS attacks, may spread to cryptomining, Fortinet says A prolific threat group known for deploying distributed denial-of-service (DDoS) and cryptomining attacks is running a new botnet that is built using the Linux-based Gafgyt source code along with some code from the Mirai botnet malware.…  ( 10 min )

Aims to develop next generation cyberinfrastructure, amongst other things The Ohio Supercomputer Center (OSC) is building out a new high performance compute cluster for AI applications based on Dell hardware with AMD Epyc processors and Nvidia GPU accelerators.…  ( 8 min )

Running a multi-user Windows environment and Git? Time to patch After a hefty Patch Tuesday comes news of an update for Git to deal with a vulnerability for the source shack when run on Microsoft's Windows.…  ( 8 min )

Cryptocurrencies make up less than 1% of wiki donations, but as member points out, that $130k could pay a salary The wiki community held a vote as to whether the Wikimedia Foundation should continue to accept cryptocurrency donations, the result of which was a resounding "no".…  ( 8 min )

Data from embedded sensors, from in the sea to in space, could be used with ML to detect next-gen weapons The US Northern Command, the military command group designated to protect North America from attack, has lobbied Congress for $29.8m to expand its IT infrastructure to better support machine-learning technologies.…  ( 9 min )

SODIMM fans rejoice – the familiar form factor returns with a speedier CPU The Raspberry Pi gang will soon ship some new hardware in a form factor to delight builders still mourning the Compute Module 3. Behold the Compute Module 4S.…  ( 9 min )

Initial boom in data vizualization, but CEO Mike Capone says it needs to 'play nice' to win in new segment Interview  It's never a zero-sum game, according to Mike Capone, CEO of data visualization software specialist Qlik. For the sake of the company, he'd better be right, as Qlik is betting its success on a foray into a market with way more competition than the one in which it earned its stripes.…  ( 10 min )

Anyone who tells you Linux is hard to use wasn't paying attention – and here's why Column  I've used pretty much every desktop out there, and the Linux desktop is still the best of the best.…  ( 9 min )

Software was supposed to eat the world, but it's scarcely snacking on today's monstrous silicon Column  When I first saw an image of the 'wafer-scale engine' from AI hardware startup Cerebras, my mind rejected it. The company's current product is about the size of an iPad and uses 2.6 trillion transistors that contribute to over 850,000 cores.…  ( 9 min )

Plus: Watchdog approves Fitbit's algorithm for detecting a dodgy ticker While Apple engineers continue adding health-related features to its smartwatch range, its blood-pressure monitoring system won't be ready until 2024 at the earliest, it is reported.…  ( 8 min )

Plans to take a bigger bite of the SME security market by swimming towards SASE Investment firm KKR has acquired Barracuda Networks from private equity firm Thoma Bravo.…  ( 8 min )

Chinese giant still hiring in Moscow – for some very interesting gigs Chinese telecom giant Huawei has issued a mandatory month-long furlough to some of its Russia-based staff and suspended new orders, according to Russian media.…  ( 8 min )

Sixty percent of current facilities are near Tokyo – a risky concentration Japan's government has secured expressions of interest from over 100 regional centers willing to host new datacenters, as part of an effort to make the nation's computing infrastructure more resilient.…  ( 7 min )

April bundle addresses 100-plus vulnerabilities including 10 critical RCEs Microsoft's massive April Patch Tuesday includes one bug that has already been exploited in the wild and a second that has been publicly disclosed.…  ( 10 min )

Argonne boffinry nerve-center is building a qubit computer with x86 giant Inside Intel sees quantum computing as the next step beyond today's CPUs and GPUs, and this week took a step ahead in delivering such a system.…  ( 9 min )

Suspected admin who went by 'Omnipotent' awaits UK decision on extradition to US After at least six years of peddling pilfered personal information, the infamous stolen-data market RaidForums has been shut down following the arrest of suspected founder and admin Diogo Santos Coelho in the UK earlier this year.…  ( 9 min )

Tool disables non-essential tokens A team of researchers at University of Wisconsin-Madison and Google say they have found a way to use artificial intelligence to neutralize manipulative cookie consent pop-ups that have become ubiquitous on the web.…  ( 8 min )

With its Emirates Mars Mission, also known as the Hope Probe, the UAE has established itself as only the fifth country in history to reach Mars and the seventh in the world to reach the orbit of another planet. The UAE’s first mission to Mars, Hope’s goal is to provide the first, complete picture of…  ( 10 min )

Cities are loud places. Traffic, trains, and machinery generate a lot of noise. While it’s a mere inconvenience much of the time, it can become a deadly problem when it comes to detecting earthquakes. That’s because it’s difficult to spot the telltale signal of an approaching earthquake in seismic sensor data amid the general human-generated…  ( 3 min )

A new type of battery made from electrically conductive polymers—basically plastic—could help make energy storage on the grid cheaper and more durable, enabling a greater use of renewable power. The batteries, made by Boston-based startup PolyJoule, could offer a less expensive and longer-lasting alternative to lithium-ion batteries for storing electricity from intermittent sources like wind…  ( 3 min )

From the factory floor to delivery robots, innovation is moving fast with real-time data processing.  ( 5 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Russian hackers tried to bring down Ukraine’s power grid to help the invasion Targeted attack: Russian hackers targeted the Ukrainian power grid and attempted to cause a blackout that would have hit 2…  ( 5 min )

For years, Michael Maxson spent more nights in hotels than his own bed, working on speaker systems for the titans of heavy rock on global tours. When Maxson decided to settle down with his wife and their two dogs, they chose the city where stadium rock spectacles took him more often than any other: Las…  ( 13 min )

A rapidly growing botnet is ensnaring routers, DVRs, and servers across the Internet to target more than 100 victims every day in distributed denial-of-service (DDoS) attacks. [...]  ( 3 min )

Security researchers have published various proof of concepts (PoCs) scripts for exploiting CVE-2022-22954 on social media and other channels, essentially enabling malicious actors to attack unpatched systems. [...]  ( 3 min )

A joint cybersecurity advisory issued by CISA, NSA, FBI, and the Department of Energy (DOE) warns of government-backed hacking groups being able to hijack multiple industrial control system (ICS) and supervisory control and data acquisition (SCADA) devices. [...]  ( 3 min )

A months-long global operation led by Microsoft's Digital Crimes Unit (DCU) has taken down dozens of domains used as command-and-control (C2) servers by the notorious ZLoader botnet. [...]  ( 3 min )

We are surrounded by billions of connected devices that contribute round-the-clock to practically every aspect of our lives - from transportation, to entertainment, to health and well-being. Here are the top three reasons why connected-device cybersecurity is more fragile than ever. [...]  ( 6 min )

A new Mirai-based botnet malware named Enemybot has been observed growing its army of infected devices through vulnerabilities in modems, routers, and IoT devices, with the threat actor operating it known as Keksec. [...]  ( 5 min )

The authors of the Elementor Website Builder plugin for WordPress have just released version 3.6.3 to address a critical remote code execution flaw that may impact as many as 500,000 websites. [...]  ( 4 min )

Apache has fixed a critical vulnerability in its vastly popular Struts project that was previously believed to have been resolved but, as it turns out, wasn't fully remedied. As such, CISA is urging users and administrators to upgrade to the latest, patched Struts 2 versions. [...]  ( 4 min )

Micron will GDDR6X-Speicherbausteine künftig auf 24 Gigabit pro Sekunde beschleunigen – gleichschnelle GDDR6-Muster verschickt Samsung derweil schon.  ( 4 min )

Wenn viel Strom aus Sonne und Wind zur Verfügung steht, wird dieser in flexiblen Tarifen günstiger. Bislang sind diese in Deutschland nicht sehr verbreitet.  ( 4 min )

Die neue Version 4.0 von PCI DSS erweitert den De-facto-Standard der Security für Zahlungssysteme. Vor allem sollen die Ziele flexibler umzusetzen sein.  ( 4 min )

Um Qualität und Performance zu verbessern, überprüft Jigsaw den von KI-Sprachmodellen wie OpenAI Codex erzeugten Code – zumindest für die Python Pandas API.  ( 4 min )

Der praxisnahe c’t-Workshop zeigt, wie Sie eine GitLab-Instanz selbst hosten, perfekt an die eigenen Anforderungen anpassen und zukunftssicher konfigurieren.  ( 3 min )

Der sonst eher von Ladesystemen bekannte US-Hersteller Anker will hoch hinaus: Sein 3D-Drucker-Debüt will fünfmal schneller sein als übliche Filament-Drucker.  ( 3 min )

Nach zwei Jahren Pandemie-Pause kommt Python-Community in Berlin zusammen. Data-Science und KI werden immer wichtiger.  ( 4 min )

AOC und Porsche Design bringen einen High-End-Monitor, der sich sehen lassen kann: 4K-Auflösung, 144 Hertz, HDMI 2.1 und Mini-LEDs mit 1600 cd/m².  ( 4 min )

Die neue Version 10.6.2 von Final Cut Pro läuft auf M1 Max und M1 Ultra schneller. Zudem lassen sich nun Stimmen isolieren.  ( 4 min )

Der Pumpen- und Armaturenhersteller KSB hat aufgrund eines Cyberangriffs die Produktion eingestellt, um seine Systeme auf Schädlingsbefall zu untersuchen.  ( 4 min )

TikTok hat die offene Beta-Phase für Effect House eingeläutet. Auf der Plattform sollen Nutzerinnen und Nutzer eigene AR-Effekte für die TikTok-App entwickeln.  ( 3 min )

Firefox bietet das Update auf Version 99.0.1 an. Die kleinen Bugfixes der neuen Version sind nicht sicherheitsrelevant, sie betreffen etwa neuere Intel-Treiber.  ( 3 min )

Kong Mesh 1.7 baut die Anbindung an Amazon Web Service aus und Kuma 1.6 verschafft Nutzern einen Überblick über Richtlinien bei Gateway-Routen.  ( 4 min )

Kurz vor der Einführung der z16 aktualisiert IBM die zugehörige Software. Die neue Mainframe-Datenbank Db2 13 für z/OS wartet mit vielen KI-Funktionen auf.  ( 4 min )

Der c’t-Workshop zum meistgenutzten CMS zeigt in praktischen Übungen, wie Sie WordPress installieren und damit Webseiten aufsetzen, betreiben und warten.  ( 4 min )

Fehler in der internen Kommunikation und ein falsches Skript waren die Auslöser des Ausfalls, sagt Atlassian – und erklärt, warum die Recovery noch andauert.  ( 4 min )

PC over IP, eine Art Remote-Desktop-Protokoll, von HP Teradici läuft auf 15 Millionen Rechnern. Komponenten von Drittherstellern haben kritische Schwachstellen.  ( 4 min )

An fünf Terminen im April und Mai können sich Admins in 20 praxisnahen Stunden zu den wichtigsten Themen rund um Microsoft 365 weiterbilden.  ( 4 min )

Die JetBrains-IDE lässt sich mit den neuesten Java- und Kotlin-Sprachfeatures nutzen. Auch WebStorm und RubyMine haben Version 2022.1 erreicht.  ( 4 min )

Aufgrund der Gefahr von möglichen Schadcode-Attacken sollten Admins ihre Apache-Struts-Systeme auf den aktuellen Stand bringen.  ( 3 min )

Interessierte können sich um einen Testplatz des auf Datenschutz getrimmten Browsers bewerben. Die App baut auf Apples Safari-Engine auf.  ( 4 min )

Die Entwickler von EndeavourOS haben Version 22.1 veröffentlicht. Highlights sind ein neuer Window-Manager und ein Installationsprogramm für Nvidia-VGA-Treiber.  ( 5 min )

Der praxisnahe Workshop vermittelt einschlägiges Know-how rund um GitOps, von den Grundlagen bis zum Meistern der Herausforderungen bei der Umsetzung.  ( 3 min )

SAP hat zu Lücken in diversen Produkten 21 neue Meldungen veröffentlicht und neun ältere aktualisiert. Administratoren sollten die Updates bald installieren.  ( 4 min )

Der Qt Quick Compiler besteht aus zwei Werkzeugen, die in der deklarativen Sprache QML geschriebenen Code weitgehend in C++ übersetzen.  ( 5 min )

Der Softwarehersteller Adobe hat mehrere Sicherheitsupdates für Acrobat und Reader, After Effects, Commerce und Photoshop veröffentlicht.  ( 3 min )

Wichtige Sicherheitsupdates schließen Lücken in Exchange Server, Office, Windows & Co. Eine Schwachstelle wird bereits aktiv ausgenutzt.  ( 4 min )

Erlangen Sie spezielle Prüfverfahrenskompetenz für § 8a BSIG; inklusive optionaler, direkt anschließender Abschlussprüfung.  ( 3 min )

Extended detection and response (XDR) is expected to be the future of cybersecurity, merging security technologies with the evolving approach to the way we do cybersecurity. And while many organizations are scrambling to integrate XDR into their cybersecurity strategies – even more are still trying to figure out what XDR really is and if it’s even the right solution for their organization.  But  ( 4 min )

The Chinese-backed Hafnium hacking group has been linked to a piece of a new malware that's used to maintain persistence on compromised Windows environments. The threat actor is said to have targeted entities in the telecommunication, internet service provider and data services sectors from August 2021 to February 2022, expanding from the initial victimology patterns observed during its attacks  ( 3 min )

The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday disclosed that it thwarted a cyberattack by Sandworm, a hacking group affiliated with Russia's military intelligence, to sabotage the operations of an unnamed energy provider in the country. "The attackers attempted to take down several infrastructure components of their target, namely: Electrical substations, Windows-operated  ( 4 min )

An international law enforcement operation raided and took down RaidForums, one of the world's largest hacking forums notorious for selling access to hacked personal information belonging to users. Dubbed Tourniquet, the seizure of the cybercrime website involved authorities from the U.S., U.K., Sweden, Portugal, and Romania, with the criminal investigation resulting in the arrest of the forum's  ( 4 min )

Microsoft's Patch Tuesday updates for the month of April have addressed a total of 128 security vulnerabilities spanning across its software product portfolio, including Windows, Defender, Office, Exchange Server, Visual Studio, and Print Spooler, among others. 10 of the 128 bugs fixed are rated Critical, 115 are rated Important, and three are rated Moderate in severity, with one of the flaws  ( 3 min )

Unsurprisingly, here at Rewind, we've got a lot of data to protect (over 2 petabytes worth). One of the databases we use is called Elasticsearch (ES or Opensearch, as it is currently known in AWS). To put it simply, ES is a document database that facilitates lightning-fast search results. Speed is essential when customers are looking for a particular file or item that they need to restore using  ( 7 min )

Carousels don’t have a good reputation, and rightfully so. But we can make them more useful. **Best practices and guidelines** to improve the carousel design with honest scrolling direction, labels, thumbnails and grouped prev/next-buttons.  ( 24 min )

PC over IP, eine Art Remote-Desktop-Protokoll, von HP Teradici läuft auf 15 Millionen Rechnern. Komponenten von Drittherstellern haben kritische Schwachstellen.  ( 4 min )

Aufgrund der Gefahr von möglichen Schadcode-Attacken sollten Admins ihre Apache-Struts-Systeme auf den aktuellen Stand bringen.  ( 3 min )

SAP hat zu Lücken in diversen Produkten 21 neue Meldungen veröffentlicht und neun ältere aktualisiert. Administratoren sollten die Updates bald installieren.  ( 4 min )

Der Softwarehersteller Adobe hat mehrere Sicherheitsupdates für Acrobat und Reader, After Effects, Commerce und Photoshop veröffentlicht.  ( 3 min )

Wichtige Sicherheitsupdates schließen Lücken in Exchange Server, Office, Windows & Co. Eine Schwachstelle wird bereits aktiv ausgenutzt.  ( 4 min )

Virgil Griffith, a US cryptocurrency expert, was sentenced on Tuesday to 63 months in prison after pleading guilty to assisting the Democratic People's Republic of Korea (DPRK) with technical info on how to evade sanctions. [...]  ( 3 min )

Microsoft says Windows admins can now opt into automatic updates for .NET (.NET Core) via Microsoft Update (MU) on Windows Server systems. [...]  ( 3 min )

Extortion denial-of-service activity, the so-called RDDoS (ransom distributed denial-of-service) attacks have taken a tumble in the first quarter of the year, according to recent statistics from Cloudflare. [...]  ( 4 min )

Microsoft has released the Windows 11 KB5012592 cumulative update with security updates, quality improvements, and a fix that makes it easier to switch your default browser. [...]  ( 3 min )

Today is Microsoft's April 2022 Patch Tuesday, and with it comes fixes for two zero-day vulnerabilities and a total of 119 flaws. [...]  ( 9 min )

Microsoft has released Windows 10 KB5012599 and KB5012591 cumulative updates for versions 21H2, version 21H1, version 20H2 and 1909 to fix security vulnerabilities and resolve bugs. [...]  ( 3 min )

Microsoft has discovered a new malware used by the Chinese-backed Hafnium hacking group to maintain persistence on compromised Windows systems by creating and hiding scheduled tasks. [...]  ( 3 min )

HP is warning of new critical security vulnerabilities in the Teradici PCoIP client and agent for Windows, Linux, and macOS that impact 15 million endpoints. [...]  ( 3 min )

The RaidForums hacker forum, used mainly for trading and selling stolen databases, has been shut down and its domain seized by U.S. law enforcement during Operation TOURNIQUET, an action coordinated by Europol that involved law enforcement agencies in several countries. [...]  ( 5 min )

Threat analysts have found evidence of malicious actors using the LockBit ransomware strain lingering in the network of a regional U.S. government agency for at least five months. [...]  ( 4 min )

The Russian state-sponsored hacking group known as Sandworm tried on Friday to take down a large Ukrainian energy provider by disconnecting its electrical substations with a new variant of the Industroyer malware for industrial control systems (ICS) and a new version of the CaddyWiper data destruction malware. [...]  ( 5 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal civilian agencies and urged all US organizations on Monday to patch an actively exploited bug impacting WatchGuard Firebox and XTM firewall appliances. [...]  ( 4 min )

Startup sells software and hardware as a subscription to make private 5G easy Intel has acquired private 5G network provider Ananki, several months after the startup spun out of the non-profit Open Networking Foundation to commercialize open-source network technologies.…  ( 9 min )

Murali Venkata found guilty of conspiracy to resell case management app A former acting branch chief of IT for the US Department of Homeland Security's (DHS) oversight office was convicted on Monday of conspiring to steal US government software in order to develop a commercial copy that could be resold to other government agencies.…  ( 9 min )

Lightspin threat researchers discovered the bug, which AWS fixed A local file read vulnerability in Amazon's Relational Database Service (RDS) could be exploited to allow an attacker to gain access to internal AWS credentials, the cloud behemoth has confirmed.…  ( 8 min )

Only 36% use it now, but an additional 47% plan to adopt HAS in the next year An Intel study finds that businesses are eager for cybersecurity and are keen to see how security can be baked into devices.…  ( 8 min )

Says its other global operations won't be affected by the process Cloud and datacenter service provider Sungard Availability Services has filed for bankruptcy both in the US and for its Canadian subsidiary, just weeks after its UK division was forced into administration.…  ( 8 min )

Industrial giants, cybersec vendors collect under OTCSA banner A number of the world's largest manufacturing and cybersecurity companies are getting behind a new consortium aimed at protecting industrial systems from threats.…  ( 8 min )

Lambda, Razer take on Apple with Tensorbook for ML engineers AI hardware company Lambda and PC gaming rig maker Razer are hoping to steal some thunder from Apple's M1 Max-powered MacBook Pro with a new laptop designed explicitly for machine learning engineers.…  ( 8 min )

Python's stranglehold in data science makes Neo4j rethink language strategy Graph database specialist Neo4j has launched a graph analytics workspace as a fully managed cloud service.…  ( 9 min )

Personal security, private travel, for exec making a single 'Zuck Buck' Meta only paid Mark Zuckerberg $1 last year, and the board recently voted to do the same in 2022. …  ( 8 min )

Guarding against the forever almost-here crypto-cracking tech OpenSSH 9 is here, with updates aimed at dealing with cryptographically challenging quantum computers.…  ( 8 min )

Reveals confidential filing but no pricing ahead of review by the SEC Arm-based server processor upstart Ampere Computing has signaled its intention to go public, and said it has filed the initial paperwork with the US Securities and Exchange Commission (SEC).…  ( 9 min )

Will the last Western tech biz in Russia please turn out the lights? Nokia is the second of the world's biggest telco network kit makers to turn its back on Russia in as many days due to the continuing invasion in Ukraine - yesterday Ericsson "indefinitely" pulled out of the country.…  ( 8 min )

Constant versioning of file systems is the way to go, Nasuni cofounder says Interview  As CTO of The New York Times two decades ago, Andres Rodriguez became frustrated with the time-consuming and unreliable process of backing up massive amounts of data that was only tested when it failed.…  ( 10 min )

That freebie that saved your bacon once or twice? Perhaps it's time to drop a bit of cash on it A timely reminder is being issued to the effect that free web services are not the same as free software: the creator of the SSLPing service says he can't look after it anymore.…  ( 8 min )

CVSS 9.8 flaws are not what you want in a hospital robot Mobile robot maker Aethon has fixed a series of vulnerabilities in its Tug hospital robots that, if exploited, could allow a cybercriminal to remotely control thousands of medical machines.…  ( 10 min )

Designed by a six-year-old, the design just needs a rocket on which to ride The UK Space Agency has marked the International Day of Human Spaceflight by announcing the winner of the Logo Lift-off Competition.…  ( 8 min )

Last week, colocating datacenters and sewage plants: this week, renewables and H2 producers A project to produce green hydrogen using wind power is planned in the mid-east of Sweden, which is expected to have the ability to make up to 240 tons of the stuff on-site every day.…  ( 8 min )

Outfits that can rummage around inside customer systems need to prove they're up to the job - and accountable Cybersecurity service providers must for licenses to operate in Singapore, under new regulations launched by the country’s Cyber Security Agency (CSA) on Monday.…  ( 8 min )

Adds cache-like storage currently offered for servers to speed demanding desktop workloads Amazon Web Services has made an interesting tweak to its “Workspaces” desktop-as-a-service offering: temporary local storage.…  ( 7 min )

Same biometric used for different people, no archives, lousy infosec among the issues India’s Comptroller and Auditor General has published a performance audit of the nation’s Unique Identification Authority and found big IT problems – some attributable to Indian services giant HCL and to HP, but others due to poor government decisions.…  ( 8 min )

14,000 small developers reported to have gone out of business during approval hiatus After a nine month pause, Beijing has finally granted new video game licenses to 45 titles.…  ( 7 min )

Another reason why this year and next will suck Alerts issued this month are pointing to chip supply issues being resolved only when new factories become operational in 2024.…  ( 8 min )

Fair Trade Commission concerned false paperwork took years to decipher Samsung boss Lee Jae-yong is in trouble – again – this time over false filings about the extent of his shareholdings.…  ( 7 min )

Attackers can insert hidden samples to steal secrets Machine learning models can be forced into leaking private data if miscreants sneak poisoned samples into training datasets, according to new research.…  ( 9 min )

Cloud collaboration biz says script deleted data that's so far been restored via backups The Atlassian outage that began on April 5 is likely to last a bit longer for the several hundred customers affected.…  ( 8 min )

Pegasus software maker faces mounting lawsuits, investigations in the US and EU Someone at least tried to use NSO Group's surveillance software to spy on European Commission officials last year, according to a Reuters report. …  ( 8 min )

Die Gematik hat ihre "Transparenz-Offensive" um den aktuellen Stand der ePA erweitert. Darüber sollen die Softwareanbieter regelmäßig Auskunft geben.  ( 4 min )

Der EU-Datenschutzbeauftragte moniert, Frontex habe keine ordnungsgemäße Datenschutzprüfung durchgeführt und DSGVO-konforme Lösungen außen vor gelassen.  ( 4 min )

Über Frame.io können Teams Videodateien in Premiere Pro online kommentieren. After Effects soll auf M1-Macs deutlich schneller laufen.  ( 4 min )

Unser werktäglicher News-Überblick fasst die wichtigsten Nachrichten des Tages kurz und knapp zusammen.  ( 4 min )

Seit Jahresanfang sehen GDatas Sicherheitsforscher einen Anstieg an Malware, die Zugangstoken zu Discord stehlen will. Nutzer sollten Maßnahmen ergreifen.  ( 4 min )

Zwischenzeitlich ließ sich der Bildschirm nicht mehr auf die aktuelle Firmware bringen. Bugs der Kamera bestehen bislang weiter.  ( 4 min )

Zwei Stellen sind in der Entwicklungsabteilung von Heise Medien neu zu besetzen: Frontend-Web-Developer und Web-Developer mit Schwerpunkt Backend.  ( 3 min )

Der Software-Anbieter Box hat das virtuelle Whiteboard "Canvas" vorgestellt. Das Kollaborations-Werkzeug soll ab Herbst in allen Box-Tarifen nutzbar sein.  ( 3 min )

Wer mit TeamViewer auf Linux-Desktops zugreifen will, braucht auf Client-Seite künftig kein Xorg mehr. Noch ist der Wayland-Support jedoch experimentell.  ( 3 min )

Offenbar arbeitet Apple an einem neuen Kompaktrechner. Er könnte erstmals mit M2-Chip ausgestattet sein.  ( 4 min )

Mit zwei neuen Instanzen richtet Amazon seine WorkSpaces stärker auf GPU-Applikationen aus. Die Cloud-Desktops konkurrieren mit Microsofts Windows 365.  ( 3 min )

Das Entwicklerteam hinter JetBrains Ktor führt mit dem Update unter anderem einheitliche Namenskonventionen für Pakete und Module ein.  ( 4 min )

Der Digitalpakt Schule ist besser als sein Ruf, aber nicht so gut, wie er sein könnte. Was sich bei der nächsten Auflage hoffentlich ändern wird.  ( 6 min )

Die erste Hauptversion des Release-Management-Tools JReleaser veröffentlicht Artefakte gleich in mehreren Paketmanagern und lässt sich individuell anpassen.  ( 3 min )

Eine neue Action mit zugehöriger API soll verhindern, dass bekannte Supply-Chain-Sicherheitslücken ihren Weg in den Code von GitHub-Nutzern finden.  ( 4 min )

Bei einem Drittel der vom Ausfall Betroffenen sollen die Jira und Confluence inzwischen wieder funktionieren. Der Rest muss sich noch eine Weile gedulden.  ( 3 min )

Für Kunden mit Enterprise-Lizenz bietet Microsoft demnächst den Autopatch-Mechanismus an, der Updates in Wellen verteilt und dabei Nebenwirkungen vermeidet.  ( 5 min )

Bei der Online-Konferenz am 26. April 2022 können Teilnehmende die Umsetzung eines kompletten Data-Science-Projekts lernen.  ( 4 min )

Durch ein Datenleck der Buchungsseite für Legoland-Übernachtungen im bayerischen Günzburg waren Kundendaten öffentlich einsehbar – seit sieben Jahren.  ( 4 min )

Die NovaStor GmbH hat ihrem Datensicherungspaket DataCenter neue Funktionen spendiert. Unter anderem bietet es zentrales Monitoring und Backups in die Cloud.  ( 4 min )

Nachdem die Mitbewerber Ansible, Chef und SaltStack in den letzten Jahren aufgekauft wurden, findet nun auch Puppet ein neues Mutterunternehmen.  ( 4 min )

Linux-Server erfolgreich aufsetzen und verwalten – für Windows-Admins und Quereinsteiger mit guten EDV-Kenntnissen. Online-Workshop vom 25. bis 29. April.  ( 3 min )

Der Webbrowser Chrome schließt in aktueller Version für Linux, Mac und Windows elf Sicherheitslücken. Durch einige könnten Angreifer vermutlich Code ausführen.  ( 4 min )

I’m a big fan of movies by J.J. Abrams. I enjoy their tight plots, quippy dialog, and of course: anamorphic lens flares. Filmmakers like Abrams use lens flare to add a dash of ‘homemade’ realism to their movies, … Add a CSS Lens Flare to Photos for a Bright Touch originally published on CSS-Tricks. You should get the newsletter.  ( 5 min )

Russian hackers targeted the Ukrainian power grid and attempted to cause a blackout that would have hit 2 million people, according to Ukrainian government officials and the Slovakian cybersecurity firm ESET. The hackers attempted to destroy computers at a Ukrainian energy company using a wiper, malware specifically designed to destroy targeted systems by erasing key…  ( 4 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Money is about to enter a new era of competition We’re on the cusp of a giant upheaval to the ways we pay for things. Cash is on the way out, and the…  ( 4 min )

Money is one of humankind’s most remarkable innovations. It makes it possible to trade products and services across great geographic distances, between people who may not know each other and have no particular reason to trust each other. It can even be used to transfer wealth and resources over time. Without money, trade and commerce—all…  ( 10 min )

Researchers have disclosed a previously undocumented local file inclusion (LFI) vulnerability in Hashnode, a developer-oriented blogging platform, that could be abused to access sensitive data such as SSH keys, server's IP address, and other network information. "The LFI originates in a Bulk Markdown Import feature that can be manipulated to provide attackers with unimpeded ability to download  ( 3 min )

Senior officials in the European Union were allegedly targeted with NSO Group's infamous Pegasus surveillance tool, according to a new report from Reuters. At least five individuals, including European Justice Commissioner Didier Reynders, are said to have been singled out in total, the news agency said, citing documents and two unnamed E.U. officials. However, it's not clear who used the  ( 3 min )

The mass adoption of cloud infrastructure is fully justified by innumerable advantages. As a result, today, organizations' most sensitive business applications, workloads, and data are in the cloud. Hackers, good and bad, have noticed that trend and effectively evolved their attack techniques to match this new tantalizing target landscape. With threat actors' high reactivity and adaptability, it  ( 4 min )

The maintainers of the NGINX web server project have issued mitigations to address security weaknesses in its Lightweight Directory Access Protocol (LDAP) Reference Implementation. "NGINX Open Source and NGINX Plus are not themselves affected, and no corrective action is necessary if you do not use the reference implementation," Liam Crilly and Timo Stark of F5 Networks said in an advisory  ( 3 min )

Google on Monday disclosed that it's taking legal action against a nefarious actor who has been spotted operating fraudulent websites to defraud unsuspecting people into buying non-existent puppies. "The actor used a network of fraudulent websites that claimed to sell basset hound puppies — with alluring photos and fake customer testimonials — in order to take advantage of people during the  ( 2 min )

A new traffic direction system (TDS) called Parrot has been spotted leveraging tens of thousands of compromised websites to launch further malicious campaigns. "The TDS has infected various web servers hosting more than 16,500 websites, ranging from adult content sites, personal websites, university sites, and local government sites," Avast researchers Pavel Novák and Jan Rubín said in a report  ( 3 min )

Like many things, a design system isn’t ever a finished thing — it’s a journey. How we go about that journey can affect the things we produce along the way. Before diving in and starting to plan anything out, be clear about where the benefits and the risks might lie.  ( 14 min )

Der Webbrowser Chrome schließt in aktueller Version für Linux, Mac und Windows elf Sicherheitslücken. Durch einige könnten Angreifer vermutlich Code ausführen.  ( 4 min )

Developers are increasingly voicing their opinions through their open source projects in active use by thousands of software applications and organizations. Most recently, the developer of the 'event-source-polyfill' npm package peacefully protested Russia's "unreasonable invasion" of Ukraine, to Russian consumers. [...]  ( 6 min )

The Qbot botnet is now pushing malware payloads via phishing emails with password-protected ZIP archive attachments containing malicious MSI Windows Installer packages. [...]  ( 3 min )

The Italian luxury fashion company Ermenegildo Zegna has disclosed a ransomware incident from August 2021 that has resulted in an extensive IT systems outage. [...]  ( 4 min )

Atlassian, a UK-based company making software development and collaboration tools, estimates it might take two more weeks to restore all customer instances impacted by a week-long ongoing outage affecting its cloud services. [...]  ( 4 min )

If you are waiting for Windows 11 side-taskbar support before upgrading to the latest operating system, you may be waiting for a long time, according to a recent Microsoft Ask Me Anything (AMA) session. [...]  ( 4 min )

A banking trojan for Android that researchers call Fakecalls comes with a powerful capability that enables it to take over calls to a bank's customer support number and connect the victim directly with the cybercriminals operating the malware. [...]  ( 4 min )

Windows 11 version 22H2 is arriving later this year and it won't be a massive release, but there will be several improvements and bugs fixes. During the Hybrid work event, Microsoft officially teased new features coming to the operating system this year. [...]  ( 4 min )

What looked like Plan B is now Plan A for config management biz Perforce, a Minnesota-based maker of DevOps software, on Monday announced the acquisition of Puppet, an Oregon-based maker of configuration management tools, for an undisclosed sum.…  ( 8 min )

Chip giant also reveals next-gen 18A process months ahead of schedule Intel has officially opened a new $3 billion expansion of its Oregon research and development campus that is key to the chipmaker's plan to overtake rivals with leading-edge chip technologies.…  ( 8 min )

New RSK Tornado system will help Russia port HPC apps to homegrown CPUs Russia is adapting to a world where it no longer has access to many technologies abroad with the development of a new supercomputer platform that can use foreign x86 processors such as Intel's in combination with the country's homegrown Elbrus processors.…  ( 7 min )

Trend Micro says vulnerable systems in Singapore have been compromised There has been a land rush of sorts among threat groups trying to use the vulnerability discovered in the open-source Spring Framework last month, and now researchers at Trend Micro are saying it's being actively exploited to execute the Mirai botnet.…  ( 8 min )

Long-awaited major release welcomed by users who wish IBM would promote it a little more In the first major upgrade since 2016, IBM is releasing a basket of updates for the edition of its well-established Db2 relational database for the z/OS mainframe operating system. The latest tweaks are designed to use machine learning to make systems more efficient to manage and operate.…  ( 8 min )

Out of this world service for Musk's satellite broadband It appears that even users of Elon Musk's Starlink service are not immune to the odd bit of borkage as the broadband-from-orbit system suffered an outage at the weekend.…  ( 7 min )

That's what Thoma Bravo is paying for SailPoint in a mid-pandemic market A $6.9 billion acquisition is putting a hard number on the value of Identity and Access Management (IAM). …  ( 7 min )

Goal to prevent brain drain of talented computer scientists from region A new Eastern Europe-based research institute aimed at advancing artificial intelligence (AI) and computing is trying to stem the flood of talented computer scientists exiting the region for the West.…  ( 8 min )

However, 'structural undersupply' might ease in the next six months or so The ongoing supply chain woes in the semiconductor market are set to last through this year and next, according to Volkswagen, which believes underlying structural problems are unlikely to be resolved before 2024.…  ( 8 min )

Plus: Can algorithms tell us how we're feeling from the sound of our voices and more In brief  The EU Commission wants to build a giant facial recognition database that will be shared with law enforcement across different countries.…  ( 9 min )

Plus: AMD tells El Reg it stopped 'all technical, product support and marketing' in pariah state Swedish network system maker Ericsson has confirmed it has "indefinitely" halted all shipments to clients in Russia, joining the ever growing list of tech organizations protesting the atrocities in Ukraine.…  ( 8 min )

Sabre deal with Google creates parallel data architecture to support ML-based ecommerce partnerships with airlines and hotel chains Feature  The computing and travel industries have traveled hand in hand for decades. For perspective, American Airlines signed a deal with IBM in 1957 which developed the first computer reservation system in 1960, based on two IBM 7090 mainframes.…  ( 9 min )

Majority of affected users still wondering where their data went The great Atlassian outage is stumbling into a new week, with the company reporting it has "rebuilt functionality for over 35 percent of the users who are impacted by the service outage," meaning the majority of those afflicted remain unable to access their sites.…  ( 7 min )

Beijing struggles to contain both misinformation and inconvenient dissent amid mass lockdowns The 25 million plus residents of the Chinese city of Shanghai are being warned not to spread rumors online or to complain about conditions during ongoing and strict COVID-19 lockdowns imposed since March 28.…  ( 8 min )

Plus: Fox News learns to use database passwords, Autodesk patches high-severity bugs, and CISA says retire old D-Link routers In brief  Google pulled a slew of Android apps with more than 46 million downloads from its Google Play Store after security researchers notified the cloud giant that the code contained some sneaky data-harvesting code.…  ( 11 min )

Next stop, French Guiana. Then Jupiter Feature  The European Space Agency's (ESA) JUICE (Jupiter Icy Moons Explorer) spacecraft has kicked off electromagnetic testing in the Airbus Defence and Space cleanrooms in Toulouse.…  ( 9 min )

Hopes to taps into pool of tech workers who aren't keen to be tied down for 40 hours per week Dell employees in the Netherlands will be able to work four days a week from this month, a director of Dell Technologies Netherlands has confirmed to The Register.…  ( 10 min )

We answer today's burning question: should YOU buy an IBM z16? Opinion  IBM's most exciting mainframe yet, the  z16, is finally here.  Just three years after the z15, at this rate IBM has until 2212 to buy the z80 trademark from Zilog.…  ( 10 min )

Where the phrase 'don't put all your eggs in one basket' originates Who, Me?  Who has got your back up? Forget comments in code, what do you do when all your source has been packed into the trunk of a family sedan? Welcome to Who, Me?…  ( 9 min )

Management promises it will keep listening, and Elon shows no sign of going quiet SpaceX and Tesla tycoon Elon Musk won't be joining Twitter's board, despite last week revealing he had acquired a 9.2 per cent stake in the microblogging service.…  ( 8 min )

Analyst says it's not a 'downward spiral' as sales are still defying predictions Shipments of PCs have finally slowed down after two years of double-digit growth, declining worldwide by 5.1 per cent year-on-year in Q1 2022, market research firm International Data Corp (IDC) said on Monday.…  ( 8 min )

Shouldn't a company from the same stable as Tata Consulting Services do better with a day one traffic flood? Giant Indian industrial conglomerate Tata has launched its attempt to rival Amazon.com and Walmart's e-commerce efforts, but suffered a bad case of the first day scalability jitters.…  ( 8 min )

Please dismiss any thoughts you had that increasing regulation might have hurt the economy China's Cyberspace Administration has published statistics to assert that the nation's big technology companies are growing and not laying off thousands of workers.…  ( 8 min )

Ab 2025 will Intels Chipfertigungssparte den Konkurrenten TSMC ausstechen – dafür verkauft ASML die erste High-NA-Belichtungsmaschine an die Firma.  ( 5 min )

Paketdienste schotten ihr Tracking immer mehr ab. Für den Entwickler einer altgedienten App, die verschiedene Dienste unterstützt, wird die Luft dünn.  ( 4 min )

Version 9.0 von OpenSSH behebt viele Fehler des freien SSH-Frameworks – und soll schon jetzt vorausschauend vor Qantencomputer-Angriffen schützen.  ( 4 min )

Die Beta enthält neben der ursprünglich bereits für TypeScript 4.5 geplanten Anbindung an ESM eine erweiterte Kontrollflussanalyse für berechnete Properties.  ( 5 min )

Die EU-Kommission stört sich offenbar an weiteren App-Store-Regeln. Nach Ansicht der Wettbewerbsaufsicht benachteiligt Apple andere Musik-Streaming-Dienste.  ( 4 min )

Unser werktäglicher News-Überblick fasst die wichtigsten Nachrichten des Tages kurz und knapp zusammen.  ( 4 min )

Sicherheitsforscher haben beobachtet, dass das Mirai-Botnet die Spring4Shell-Schwachstelle angreift und dadurch die Malware verbreitet.  ( 4 min )

Die Konferenz zu aktuellen Machine-Learning-Themen findet im Juni wieder vor Ort statt. Wer die aktuelle Lage noch beobachtet, bekommt weiter Rabatt.  ( 4 min )

Admins von Systemen mit Dell EMC PowerScale OneFS sollten die Software aus Sicherheitsgründen auf den aktuellen Stand bringen.  ( 3 min )

Anderthalb Monate nach Beginn des russischen Angriffskriegs gegen die Ukraine setzt nun auch Ericsson seine Geschäfte in Russland komplett aus.  ( 3 min )

Die Konferenzreihe betrachtet Themen wie Führungskompetenz, Zusammenarbeit in Teams und hilfreiche Tools & Techniken unter dem Aspekt des hybriden Arbeitens.  ( 4 min )

Die Raspberry Pi-Macher haben im Standardnutzer pi ein Sicherheitsproblem erkannt. Deshalb muss er gehen. Weitere Verbesserungen vereinfachen die Nutzung.  ( 6 min )

Das Active Directory ist der Dreh- und Angelpunkt bei Ransomware-Angriffen. Wie man es absichert, zeigt das neue iX kompakt auf über 170 Seiten.  ( 4 min )

Offenbar durch ein Versehen war ein Supportdokument vorab online. Der Konzern könnte demzufolge in Kürze seine erste Doppel-Stromversorgung anbieten.  ( 4 min )

Seit fast einer Woche arbeiten "hunderte Ingenieure" daran, dass alle Atlassian-Kunden wieder auf die Kollaborations-Tools des Anbieters zugreifen können.  ( 4 min )

Es gibt wichtige Sicherheitsupdates für die Webbrowser Firefox ESR und Tor Browser und für den Mailclient Thunderbird.  ( 3 min )

In drei Tagen mit dem Elastic Stack die eigenen Unternehmensdaten überwachen und in Echtzeit analysieren und visualisieren lernen. 10 % Preisnachlass bis 25.4.  ( 3 min )

Admins von Systemen mit Dell EMC PowerScale OneFS sollten die Software aus Sicherheitsgründen auf den aktuellen Stand bringen.  ( 3 min )

Es gibt wichtige Sicherheitsupdates für die Webbrowser Firefox ESR und Tor Browser und für den Mailclient Thunderbird.  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Inside the fierce, messy fight over “healthy” sugar tech In a former insurance office building on the outskirts of Charlottesville, Virginia, a new kind of sugar factory is taking shape. The facility is…  ( 4 min )

In a former insurance office building on the outskirts of Charlottesville, Virginia, a new kind of sugar factory is taking shape. The 48,000-square-foot facility is being developed by a startup called Bonumose, funded in part by Hershey. It uses a processed corn product called maltodextrin that is found in many junk foods. Like its notorious…  ( 17 min )

Cybersecurity researchers are warning of two different information-stealing malware, named FFDroider and Lightning Stealer, that are capable of siphoning data and launching further attacks. "Designed to send stolen credentials and cookies to a Command & Control server, FFDroider disguises itself on victim's machines to look like the instant messaging application 'Telegram,'" Zscaler ThreatLabz  ( 3 min )

Microsoft last week announced that it intends to make generally available a feature called Autopatch as part of Windows Enterprise E3 in July 2022. "This service will keep Windows and Office software on enrolled endpoints up-to-date automatically, at no additional cost," said Lior Bela, senior product marketing manager at Microsoft, in a post last week. "The second Tuesday of every month will be  ( 3 min )

This new attribute will enable us to fine-tune relative resource priority, improve LCP performance, deprioritize JavaScript fetch calls, and much more. Let’s check out fetchpriority and explore some potential use cases.  ( 8 min )

Independent analyst Brand Duncan has spotted a malspam campaign delivering META, a new info-stealer malware that appears to be rising in popularity among cybercriminals. [...]  ( 4 min )

Microsoft has tweaked the Microsoft Edge sleeping tabs feature to further improve the web browser's overall responsiveness and performance. [...]  ( 3 min )

Das Deutsche Zentrum für Luft- und Raumfahrt testet einen Arbeitsplatz für die bei Robo-Autos hierzulande gesetzlich vorgeschriebenen technischen Aufseher.  ( 5 min )

Microsoft übernimmt die Kontrolle von sieben Domains, die für Cyberangriffe auf die Ukraine genutzt wurden. Dahinter stecke der russische Geheimdienst.  ( 4 min )

Gelöschte Tweets sollen weiterhin sichtbar bleiben: Twitter zieht eine gerade erst eingeführte Änderung zurück, die eingebettete Tweets unlesbar machte.  ( 4 min )

Washington looks to private sector help for Open RAN ambitions The US Department of Defense is encouraging companies to build open and interoperable 5G, and it's willing to shell out a portion of $3 million to anyone who provides a solution.…  ( 9 min )

A model can improve overnight, it just takes pared-down scale and a little human intervention It turns out the machines still need us after all, at least for now. And while the largest systems get the most attention, the secret to truly useful, fair AI are best served small and with plenty of human input.…  ( 9 min )

The smallest artificial spin ice ever created could be part of novel low-power HPC Researchers at the Paul Scherrer Institute and ETH Zurich have managed to accomplish a technological breakthrough that could lead to new forms of low-energy supercomputing.…  ( 9 min )

ML master pitches trimmed-down deep learning for the masses In 2015, modern AI trailblazer Andrew Ng's recipe for success was to go big on neural networks, data, and monolithic systems. Now that recipe has created a problem: the technology is dominated by only a few rich companies with the money and headcount to build such immense systems.…  ( 9 min )

Do we have enough toner for barracks in Fort Bliss base in Texas? The US Department of Defense is to construct and try out the largest 3D-printed buildings in the Americas: three barracks in a Lone Star army base.…  ( 8 min )

FromSoftware's magnum opus, made with input from George R R Martin, invites new and veteran players alike The RPG  Greetings, traveler, and welcome back to The Register Plays Games, our monthly gaming column. You'll forgive the lateness of this edition because there was really only one game that mattered in March – perhaps the entirety of 2022 – and that game's name is Elden Ring.…  ( 19 min )

Online attacks follow suspected airspace violation by Russian aircraft Cyberattacks took down Finnish government websites on Friday while Ukrainian President Volodymyr Zelenskyy addressed Finland's members of parliament (MPs).…  ( 8 min )

Microsoft OneDrive: Missing documents? Hold my beer Atlassian is still scrambling to recover from a recent software script fiasco and is hoping no customer data gets lost, which may be more than Microsoft can manage if OneDrive, as some have reported, has been intermittently corrupting large uploads for at least two months.…  ( 9 min )

Saturday rendezvous planned for historic commercial orbit ride A retired NASA astronaut and three space tourists are right now tucked inside a SpaceX Dragon capsule above Earth for the first-ever purely commercial mission to the International Space Station.…  ( 8 min )

Batteries, displays, cameras and more, apparently In a nod to right-to-repair efforts, Google is partnering with iFixit to offer spare parts for its Pixel smartphones dating all the way back to 2017.…  ( 8 min )

A hacking group used the Conti's leaked ransomware source code to create their own ransomware to use in cyberattacks against Russian organizations. [...]  ( 4 min )

A new Android banking malware named Octo has appeared in the wild, featuring remote access capabilities that allow malicious operators to perform on-device fraud. [...]  ( 4 min )

Microsoft announced that Windows Autopatch, a service designed to automatically keep Windows and Office software up to date, will be released in July 2022. [...]  ( 3 min )

Viele USB-Geräte belegen zusammen mit einem Netzteil eine komplette Steckdose. Doch das ist in vielen Fällen unnötig. Steckdosen mit USB-Ports schaffen Abhilfe.  ( 4 min )

Die EU-Kommission steht in der Kritik, da sie BT trotz Brexit einen 1,2 Milliarden Euro Auftrag für den Transeuropäischen Telematikdienst erteilen will.  ( 5 min )

Der VDE hat ein Fortbildungsprogramm zu technisch versierten Arzt- und Patientenhelfern zertifiziert. Sie sollen Gesundheits-Apps und die ePA voranbringen.  ( 5 min )

Das Wirtschaftsministerium hat für die EU-Initiative für Cloud-Infrastrukturen mehrere, teils besonders energieeffiziente Projekte in Brüssel eingereicht.  ( 4 min )

Heute in c’t uplink sprechen wir über GPT-3 und andere KI-Sprachmodelle, die uns vielleicht arbeitslos machen – oder auch nicht.  ( 4 min )

The recently disclosed critical Spring4Shell vulnerability is being actively exploited by threat actors to execute the Mirai botnet malware, particularly in the Singapore region since the start of April 2022. "The exploitation allows threat actors to download the Mirai sample to the '/tmp' folder and execute them after permission change using 'chmod,'" Trend Micro researchers Deep Patel, Nitesh  ( 3 min )

Double-standard rules have strengthened iGiant's gatekeeper power Apple's ramp up in iOS privacy measures has affected small data brokers, yet apps can still collect group-oriented data and identify users via device fingerprinting, according to a study out of Oxford.…  ( 11 min )

Software giant sinkholes systems used by Russian gang Microsoft this week seized seven internet domains run by Russia-linked threat group Strontium, which was using the infrastructure to target Ukrainian institutions as well as think tanks in the US and EU, apparently to support Russian's invasion of its neighbor.…  ( 8 min )

Goodness, gracious, lots of insights on great balls of fire The US Space Force is publicly releasing nearly 30 years of data on fireball meteors in the hopes it can improve the detection and impact prediction of near-Earth objects (NEOs).…  ( 8 min )

Special method for production gets cash injection from govt, vendors New techniques for producing lithium could play a vital part in making batteries for applications ranging from smartphones to electric vehicles that are more environmentally friendly than current methods of extraction.…  ( 8 min )

Some fear they'll lose workstation sales to Lenovo, AMD's exclusive launch partner for the T Pro 5000 If you've been on the hunt for a pre-built workstation with AMD's Ryzen Threadripper processors, there's a chance you've noticed fewer options available and longer lead times from different PC system builders.…  ( 11 min )

12 years on, rebates-for-not-using-AMD-chips case isn't over yet... The European Commission (EC) is going ahead with an appeal against a court decision earlier this year to drop a $1.2 billion fine imposed against Intel for anti-competitive behavior.…  ( 8 min )

Default user gone, Bluetooth pairing during setup, and latest LTS Linux kernel An update to the Debian Bullseye-based Raspberry Pi OS is being rolled out with both quality-of-life improvements and one very important tweak: an overdue departure of the default user.…  ( 8 min )

Remember warning about hurried release to meet Brexit deadline? Never forget Updated  A system vital to the flow of goods across the UK's border has suffered a devastating outage following a rush to implement it in time for the Brexit deadline.…  ( 9 min )

Agency upset YouTube hasn't removed 'fake' videos about activities it won't call 'war' Russia's communications scold is fed up with all the misinformation online, at least with regard to Google and its YouTube subsidiary.…  ( 8 min )

This week's column coming to you via hologram. Or a spaceship Something for the Weekend  How can you tell if a fish is upset? It doesn't grind its pharyngeal teeth, clench its fins or utter moist oaths. And it's not as if you can see tears streaming down its face.…  ( 10 min )

Standard grants access to public hotspots without having to register each time The Wireless Broadband Alliance (WBA) has completed testing to prepare for the deployment of WBA OpenRoaming, a federation service built to give seamless access to Wi-Fi hotspots across Europe's municipal networks.…  ( 8 min )

Google says Topaz will lower latency, even though both nations already have shorter routes to bit barns Google has revealed it will fund a submarine cable connecting Japan and Canada.…  ( 8 min )

CWU wants 10% for members, cites biting inflation rises in UK The Communication Workers Union is lining up an industrial action ballot for members working at BT after rejecting the telecom company's offer of a flat rate £1,500 pay rise for 58,000 frontline workers.…  ( 9 min )

Beijing may have had a hand in attacks in Ukraine, too China has been accused of conducting a long-term cyber attack on India's power grid, and has been implicated in cyber attacks against targets in Ukraine.…  ( 8 min )

Back up your data, it's later than you think On Call  It's a tale from before the times of Bitlocker and TPM in On Call today as a Register reader demonstrates the importance of knowing one's true worth.…  ( 7 min )

'Opaque and difficult' Google Ad rules cost biz 20 hours profit Google has failed in its bid to dismiss a €150 million fine ordered by France's monopoly watchdog in 2019 for exploiting its position in the search advertising market, a court ruled on Thursday.…  ( 7 min )

Office 365 and Windows 365 prices to rise in September – one SKU by much more than recent commercial increase Microsoft has hiked the price of Office 365 and Windows 365 versions it offers to non-profit customers, effective September 1, 2022.…  ( 8 min )

For now, a mere 80 million more citizens can trial the Digital Yuan China's central bank digital currency, the Digital Yuan, has been integrated with Tencent's flagship messaging app WeChat, and appears as a payment option when users employ the super-app shop.…  ( 7 min )

Appoints independent committee and gives angry investors most of what they want Toshiba has decided it will consider proposals to take the company private, and devise yet another strategy to improve its performance, suggesting alternative proposals for the company's future will be revealed – and perhaps decided - in late June.…  ( 7 min )

He's the third gangster in crew to face time behind bars Another member of notorious cybercrime ring FIN7 is headed to jail after the gang breached major companies' networks across the US and stole more than $1 billion from these businesses' customers.…  ( 8 min )

Automated HR in the cross-hairs over discrimination law A newly proposed amendment to California's hiring discrimination laws would make AI-powered employment decision-making software a source of legal liability. …  ( 8 min )

American automotive tools manufacturer Snap-on announced a data breach exposing associate and franchisee data after the Conti ransomware gang began leaking the company's data in March. [...]  ( 4 min )

Microsoft has reminded customers today that multiple editions of Windows 10 20H2 and Windows 10 1909 are reaching the end of service (EOS) on May 10, 2022. [...]  ( 4 min )

GitHub can now block and alert you of pull requests that introduce new dependencies impacted by known supply chain vulnerabilities. [...]  ( 3 min )

The Mirai malware is now leveraging the Spring4Shell exploit to infect vulnerable web servers and recruit them for DDoS (distributed denial of service) attacks. [...]  ( 4 min )

Today, the U.S. has announced exemptions on previously imposed sanctions on Russia related to telecommunications and internet-based communications, likely to prevent Russians from being isolated from Western news sources. [...]  ( 4 min )

An update to Raspberry Pi OS Bullseye has removed the default 'pi' user to make it harder for attackers to find and compromise Internet-exposed Raspberry Pi devices using default credentials. [...]  ( 4 min )

Microsoft has successfully disrupted attacks against Ukrainian targets coordinated by the Russian APT28 hacking group after taking down seven domains used as attack infrastructure. [...]  ( 3 min )

To create sustainable business impact, AI capabilities need to be tailored and optimized to an industry or organization’s specific requirements and infrastructure model. Hear how customers’ challenges across industries can be addressed in any compute environment from the cloud to the edge with end-to-end hardware and software optimization. About the speakers Kavitha Prasad, VP &…  ( 3 min )

The use of AI in finance is gaining traction as organizations realize the advantages of using algorithms to streamline and improve the accuracy of financial tasks. Step through use cases that examine how AI can be used to minimize financial risk, maximize financial returns, optimize venture capital funding by connecting entrepreneurs to the right investors;…  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. How a Zambian morgue is exposing the real covid toll in Africa The morgue at Lusaka’s University Teaching Hospital (UTH), near the center of Zambia’s capital, is not the most pleasant place to…  ( 4 min )

The morgue at Lusaka’s University Teaching Hospital (UTH), a sprawling brick facility near the center of Zambia’s capital, is not the most pleasant place to carry out a clinical study. Inside the cavernous interior, newly arrived bodies linger unattended—on rolling metal tables or on the concrete floor wrapped in blankets. Others lie stacked on open-air…  ( 10 min )

China-linked adversaries have been attributed to an ongoing onslaught against Indian power grid organizations, one year after a concerted campaign targeting critical infrastructure in the country came to light. Most of the intrusions involved a modular backdoor named ShadowPad, according to Recorded Future's Insikt Group, a sophisticated remote access trojan which has been dubbed a "masterpiece  ( 4 min )

Cybersecurity researchers have uncovered further links between BlackCat (aka AlphaV) and BlackMatter ransomware families, the former of which emerged as a replacement following international scrutiny last year. "At least some members of the new BlackCat group have links to the BlackMatter group, because they modified and reused a custom exfiltration tool [...] and which has only been observed in  ( 3 min )

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual's criminal work as a "high-level hacker" in the financially motivated group FIN7. Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, had been previously arrested in Bangkok, Thailand in November 2019, before being extradited to the U.S.  ( 3 min )

Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia's military intelligence service, with the goal of neutralizing its attacks on Ukraine. "We have since re-directed these domains to a sinkhole controlled by Microsoft, enabling us to mitigate Strontium's current use of these domains and enable  ( 4 min )

A number of rogue Android apps that have been cumulatively installed from the official Google Play Store more than 50,000 times are being used to target banks and other financial entities. The rental banking trojan, dubbed Octo, is said to be a rebrand of another Android malware called ExobotCompact, which, in turn, is a "lite" replacement for its Exobot predecessor, Dutch mobile security firm  ( 4 min )

Apple tritt Bedenken über die Bevorzugung eigener iPhone-Apps entgegen. Die Lobby-Ausgaben in Europa hat der Konzern inzwischen offenbar verdoppelt.  ( 4 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem BMC, Mainframe, Eclipse IoT, Cython, Emacs, Laravel, Rome und DataGrip.  ( 4 min )

BigLake soll Googles zentrale Datenplattform werden und Analytik strukturierter sowie unstrukturierter Daten unter ein gemeinsames Dach bringen.  ( 3 min )

Vor sieben Jahren sorgte die FIN7-Gruppe mit dem größten Cyber-Raubzug für Schlagzeilen, danach blieb sie aktiv. Nun wurde ein drittes Mitglied verurteilt.  ( 4 min )

Die Berliner Datenschutzbeauftragte hat den Senat aufgefordert, Facebook-Fanpages abzuschalten. Grundlage ist ein Gutachten der deutschen Datenschutzbehörden.  ( 3 min )

Die Vorabversion des Plug-ins von Couchbase bietet bereits erste Optionen zum Bearbeiten und Löschen von Datenbankinhalten über die Entwicklungsumgebung.  ( 4 min )

Der Compiler bietet eine Anbindung an die sourcebasierte Codeabdeckung von LLVM. Außerdem stolpert die Sprache nicht mehr über scheinbar negative Zeitspannen.  ( 5 min )

Mit wenigen Mitteln und effizienten Maßnahmen lassen sich Social-Media-Auftritte professioneller gestalten. Der Workshop liefert praxisnah das nötige Rüstzeug.  ( 4 min )

In der Ukraine sind in den vergangenen Wochen tausende Starlink-Antennen angekommen und installiert worden. Die US-Regierung organisiert die Lieferungen.  ( 4 min )

Ein halbes Jahrzehnt ist es her, dass Apple seine Strategie bei den Workstations radikal wechselte – spät, aber oho. Resultat sind die superschnellen ARM-Macs.  ( 4 min )

Alle sieben Vorträge der letztjährigen Online-Konferenz betterCode() Go stehen nun auf Vimeo sowohl als Paket als auch einzeln zum Kauf bereit.  ( 3 min )

Auf dem Mac kann nun die Shortcuts-App zur Automatisierung von Pages, Numbers und Keynote verwendet werden. Auch für iOS und iPadOS gibt es eine Aktualisierung.  ( 4 min )

Der im September 2022 startende Hochschulzertifikatskurs über das Datenschutzmanagement qualifiziert Teilnehmende zum Datenschutzbeauftragten.  ( 3 min )

Baden in Niederösterreich hat sich die BadenCard für den Wertstoffhof ausgedacht. Da der politische Druck groß war, baute man hastig eine Website: mit Folgen.  ( 8 min )

Das US-Tech-Unternehmen baut ein regionales Rechenzentrum von Weltklasse in Zentralmexiko. Es soll Kunden weltweit das gesamte Microsoft-Portfolio anbieten.  ( 4 min )

Data is among the most important things that make up a web application or a conventional native app. We need data to be able to see and perhaps understand the purpose of an application. In this article, we’ll look at another approach to obtaining data in an application that requires authentication or authorization using Next.js.  ( 6 min )

Good data is the bedrock of a self-service data consumption model, which in turn unlocks insights, analytics, personalization at scale through AI. Yet many organizations face immense challenges setting up a robust data foundation. Dive into a pragmatic perspective on abstracting the complexity and untangling the conflicts in data management for better AI. About the…  ( 2 min )

While digital accessibility awareness is growing — fueled by the rise of accessibility lawsuits, renewed efforts by the government, and diversity and inclusion initiatives—progress on making the internet more accessible to people with disabilities remains slow. Companies ranging from major health care corporations to small businesses with Shopify storefronts are struggling to make their websites…  ( 5 min )

In many areas of the world, environmental conditions are not conducive to traditional farming. Ensuring food security depends on continuous agricultural innovation, which has been part of the United Arab Emirates’ (UAE) mission since its founding, given the country’s arid conditions and little water. Smart Acres is one of the many companies exploring new sustainable…  ( 14 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Deception, exploited workers, and free cash: How Worldcoin recruited its first half a million test users On a sunny morning last December, Iyus Ruswandi, a 35-year-old furniture maker in the village of Gunungguruh,…  ( 5 min )

Plus: More financially motivated miscreants try to monetize invasion Facebook is fighting a surge in cyber-espionage attempts and misinformation campaigns related to the Russian invasion of Ukraine, according to a new report by parent group Meta.…  ( 8 min )

Equip Amazon rivals with flexible networking chips? Sounds Epyc With cloud service providers like Amazon Web Services increasingly building their own silicon, it's no surprise that large chip companies like Intel and AMD are trying to find new ways not just to remain relevant in the cloud but to become can't-miss vendors for next-generation architectures.…  ( 11 min )

Bundled version of Node.js simplifies executing downloaded code Adobe Creative Cloud Experience, a service installed via the Creative Cloud installer for Windows, includes a Node.js executable that can be abused to infect and compromise a victim's PC.…  ( 8 min )

Want that thing, but in a different color, and don't know the name? Multisearch has your back Google's latest feature is making its Lens visual search tool mingle with text for image searches for those difficult-to-describe vague queries.…  ( 9 min )

Datacenter operator with $2.3b value said to be discussing options a year after SPAC merger Datacenter operator Cyxtera is considering putting itself up for sale, according to reports.…  ( 8 min )

Fintech provider flaw could have hit dozens of U.S. banks, says Salt Security Salt Security spotted a vulnerability in a large fintech company's digital platform that would have granted attackers admin access to banking systems in addition to allowing them to transfer funds to their own accounts.…  ( 10 min )

Pressure on Congress to submit the America COMPETES Act ASAP The Biden administration wants the $52 billion CHIPS Act passed without delay, according to a classified briefing between senior officials and a bipartisan group of Congressional representatives.…  ( 8 min )

Improved defenses give organizations more room to negotiate but won't protect from lawsuits, says law firm An increased willingness on the part of enterprises to invest in cybersecurity may finally be starting to make a difference, according to US law giant BakerHostetler.…  ( 9 min )

Motion calls for repairability ratings and expected lifetime of products European lawmakers are voting in plenary on a Right to Repair resolution today amid calls for the initiative to go even further.…  ( 8 min )

Even notoriously tech averse stock market gambler can't resist piece of pandemic-boosted PC extravaganza Warren Buffett's Berkshire Hathaway has taken up a double-digit stake in PC and print biz HP Inc's stock worth about $4.2 billion, a move that sent the company's share price up by 10 percent.…  ( 8 min )

30-year-old software that first introduced Windows Registry and killed Real Mode Time flies whether you're having fun or simply trying to work out which Registry change left your system hopelessly borked, and before you know it, Windows 3.1 is turning 30.…  ( 8 min )

Semiconductor Alliance wants US R&D billions to be dished out fairly, broadly, objectively A newly formed group is calling for the US to ensure efforts and public funding to boost the nation's domestic semiconductor industry benefits a broad family of stakeholders, not just a few companies.…  ( 9 min )

No actual users harmed yet as dept tests safety of pushing water, telecoms services in single pipeline Parts of South Yorkshire are to get fiber broadband run through mains water pipes in a two-year trial to evaluate the viability of the technology for connecting more homes.…  ( 8 min )

Cicada's months-long global espionage campaign marks an expansion of team's capabilities A China-backed crew is said to be running a global espionage campaign against governments, religious groups, and non-governmental organizations (NGOs) by, in some cases, possibly exploiting a vulnerability in Microsoft Exchange servers.…  ( 9 min )

Optional update should apply to all users, says Vivaldi boss Microsoft's one-click default browser change under Windows 11 is being met with raised eyebrows from its browser rivals.…  ( 8 min )

Company cites data security and privacy as reasons for cleaning house Outdated apps will no longer be accessible on Androids that are either new or updated to the latest software starting November 1, thanks to a Google policy that was announced Wednesday.…  ( 7 min )

From serverless to server, yes! Cado Security says it has discovered a strain of malware specifically designed to run in AWS Lambda serverless environments and mine cryptocurrency.…  ( 11 min )

VIPER mission also bitten by tech supply chain woes Progress on NASA's Volatiles Investigating Polar Exploration Rover (VIPER) mission to search for useful chemicals at the Moon's South Pole has been delayed by two tech-related issues springing from the COVID-19 pandemic.…  ( 8 min )

It paints, it edits, it potentially misleads people with faked pictures OpenAI has provided its latest caption-to-image-generation model, dubbed DALL·E 2, to select users to test before it potentially opens up the technology for wider use. …  ( 8 min )

Meanwhile changes the name of its major customer-facing event – probably a coincidence VMware has revealed more critical bugs that impact five of its products, including the Cloud Foundation bundle it advances as the ideal way to build a hybrid multi-cloud.…  ( 9 min )

Foreign nationals who earn STEM PhDs stateside mostly stick around Most foreign nationals who earn STEM PhDs in the United States remain in the country many years after graduating, with the highest numbers among Chinese and Indian graduates, according to a report released this week from American policy think tank, the Center for Security and Emerging Technology (CSET).…  ( 8 min )

3D Investment Partners wants to sell, labels company a 'governance embarrassment for Japan' One of Toshiba’s largest shareholders has called upon the company's board to solicit bids to acquire all or part of the ailing Japanese giant.…  ( 8 min )

Inventors, assemble! India's attempts to turn itself into a global electronics manufacturing powerhouse appear to have stalled a little, with government data showing negligible growth in value of production and a reduction in exports. But the nation has also revealed a plan to improve matters: a supergroup of expats who will help grow its semiconductor industry.…  ( 8 min )

We talk to CEO about projectile-based implosion design British outfit First Light Fusion claims it has achieved nuclear fusion with an approach that could provide cheap, clean power.…  ( 9 min )

Lawsuit accuses Big Blue of cheating investors by shifting systems revenue to trendy cloud, mobile tech Special report  IBM has been sued by investors who claim the company under former CEO Ginni Rometty propped up its stock price and deceived shareholders by misclassifying revenues from its non-strategic mainframe business – and moving said sales to its strategic business segments – in violation of securities regulations.…  ( 12 min )

Who, what, when, how still to be worked out, ironically The Canadian government this week introduced a law bill that would force the likes of Google and Facebook to pay Canadian news publishers for using their articles online.…  ( 8 min )

Denys Iarmak, a Ukrainian member and a "pen tester for the FIN7 financially-motivated hacking group, was sentenced on Thursday to 5 years in prison for breaching victims' networks and stealing credit card information for roughly two years, between November 2016 and November 2018. [...]  ( 4 min )

Google has announced several key policy changes for Android application developers that will increase the security of users, Google Play, and the apps offered by the service. [...]  ( 5 min )

Security researchers have discovered the first malware specifically developed to target Amazon Web Services (AWS) Lambda cloud environments with cryptominers. [...]  ( 4 min )

A new TDS (Traffic Direction System) operation called Parrot has emerged in the wild, having already infected servers hosting 16,500 websites of universities, local governments, adult content platforms, and personal blogs. [...]  ( 4 min )

The Hamas-backed hacking group tracked as 'APT-C-23' was found catfishing Israeli officials working in defense, law, enforcement, and government agencies, ultimately leading to the deployment of new malware. [...]  ( 5 min )

Mobile malware analysts warn about a set of applications available on the Google Play Store, which collected sensitive user data from over 45 million devices. [...]  ( 5 min )

Apples Klage scheint keine abschreckende Wirkung zu zeigen: Im Dezember wurde das iPhone einer jordanischen Journalistin erneut mit Pegasus gehackt.  ( 4 min )

Die Systemverwaltungs-Suite Microsoft System Center erscheint als neue Langzeit-Version und ist an Windows Server 2020 und Azure Stack HCI adaptiert.  ( 3 min )

Ampeln, Stopp-Schilder, Maut-Straßen: Google implementiert neue Informationen in Maps. Teile der Neuerungen sollen bald auch schon in Deutschland laufen.  ( 4 min )

Intel macht seinen schnellsten Desktop-Prozessor noch schneller – preislich hat es der Core i9-12900KS jedoch in sich.  ( 3 min )

Suchmaschinenbetreiber wie Google müssen Anträge prüfen, die das Löschen von Links aus den Ergebnislisten fordern. Das meint ein Generalanwalt des EuGH.  ( 3 min )

Nachdem sie geblitzt wurden, müssen rund 3.000 Autofahrer wegen eines Hackerangriffs von 2021 im Landkreis Ludwigslust-Parchim keine Strafe zahlen.  ( 3 min )

Cisco warnt in mehreren Sicherheitsmeldungen vor Lücken in den Produkten. Außerdem listet das Unternehmen von der Spring-Framework-Lücke betroffene Lösungen.  ( 4 min )

Entwickler sind darüber verärgert, dass Twitter eingebettete, aber schon gelöschte Tweets nicht mehr anzeigt. Damit gehe eine Archivierungsfunktion verloren.  ( 3 min )

Die Abgeordneten wollen eine effizientere Ressourcennutzung fördern, Abfälle reduzieren und eine längere Nutzung von Produkten wie Smartphones unterstützen.  ( 4 min )

Russische iPhone-Nutzer können die App des verhafteten Putin-Kritikers wieder laden. Sie war nach Drohungen gegen Apple-Mitarbeiter entfernt worden.  ( 4 min )

Das jährliche Treffen der Samba-Entwickler findet auch dieses Jahr digital statt und ist kostenlos für Interessierte zugänglich. Das Programm steht bereits.  ( 3 min )

Mehrere VMware-Produkte sind von teils kritischen Lücken betroffen, durch die Angreifer Schadcode einschleusen könnten. Es gibt Updates und Gegenmaßnahmen.  ( 4 min )

An zwei Tagen analysieren Sie aktuelle Angriffstechniken, um die eigene Anfälligkeit und Schutzmaßnahmen besser bewerten zu können. Frühbucherrabatt bis 21.4.  ( 3 min )

Die eigene Kryptowährung "Diem" floppte, nun möchte Meta offenbar seine Finanzprodukte ausbauen. Im Gespräch sind verschiedene Zahlungsmittel für Meta-Apps.  ( 4 min )

US-Bundespolizei ist gegen ein Botnet vorgegangen, das tausende Netzwerkgeräte umfasste. USA und Großbritannien sind sich sicher, dass Russland dahintersteckt.  ( 4 min )

Nur 145 mm hoch trotz 120 mm großem Lüfter: Der NH-D12L wimmelt im Feld der Prozessorkühler mit 92 mm kleinen Lüftern, soll aber besser kühlen.  ( 4 min )

Der Nachfolger des KI-Systems von OpenAI kann nicht nur Bilder anhand von Beschreibungen erstellen, sondern sie auch ergänzen oder umgestalten.  ( 6 min )

PaLM bringt einen Qualitätssprung für große KI-Sprachmodelle: Es kann Code generieren, mit Arithmetik umgehen und Witze erklären. Google spricht von Durchbruch.  ( 7 min )

Neue Aufgaben für iPhone und iPad • macOS 12 auf alten Macs • Mac und iPad wachsen zusammen • Test: Mac Studio und Apple Studio Display, iPhone SE 3, iPad Air 5  ( 8 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Diesmal zu Gast: Jochen Christ, Simon Harrer und Theo Pack.  ( 3 min )

Interaktive Diagramme, ein veränderter Umgang mit angehängten Mediendateien sowie Performance-Verbesserungen sind Teil des neuen Release.  ( 4 min )

Lange ließ sich Teams zwar in Firefox starten, sobald ein Anruf anstand, war der Spaß jedoch vorbei. Nun rüstet Microsoft diese essenziellen Funktionen nach.  ( 3 min )

Die Breko-Einkaufsgemeinschaft bringt mit Gigaset einen Router auf den Markt, den Carrier ihren Kunden anbieten können. Weitere Modelle sind in der Pipeline.  ( 4 min )

Mehrere Produkte von Fortinet mit teils kritischen Sicherheitslücken ermöglichten Angreifern, etwa Schadcode einzuschleusen. Updates dichten die Lücken ab.  ( 4 min )

C++-Profis lernen an drei Tagen die großen Neuerungen in C++20 kennen und wie man sie effektiv in eigenen Projekten einsetzen kann. Einige Plätze frei.  ( 3 min )

Nach Ansicht der Verbraucherschützer verstößt Google mit seinem Design für die Cookie-Banner gegen "nationale Regelungen und EU-Vorgaben".  ( 4 min )

Durch Parks, Fußgängerzonen und andere Orte der Rheinmetropole sind aktuell Apples Kartenerfasser unterwegs. Die Fotos werden aber nicht online gehen.  ( 4 min )

Die neue Version der Linux-Distribution Deepin enthält viele kleinere Änderungen, die hauptsächlich den Arbeitsalltag erleichtern sollen.  ( 4 min )

Der IPv4-Nachfolger verbreitet sich langsam. Wir lassen uns erklären, warum das so lange dauert, was die Vorteile von IPv6 sind und was man selbst machen kann.  ( 4 min )

A first-of-its-kind malware targeting Amazon Web Services' (AWS) Lambda serverless computing platform has been discovered in the wild. Dubbed "Denonia" after the name of the domain it communicates with, "the malware uses newer address resolution techniques for command and control traffic to evade typical detection measures and virtual network access controls," Cado Labs researcher Matt Muir said  ( 3 min )

A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an "elaborate campaign" targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and emergency services organizations. "The campaign operators use sophisticated social engineering techniques, ultimately aimed to deliver previously undocumented backdoors for Windows and  ( 4 min )

As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot. "SharkBot steals credentials and banking information," Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with The Hacker News. "This malware implements a geofencing feature and evasion techniques, which makes it  ( 3 min )

During the last week of March, three major tech companies - Microsoft, Okta, and HubSpot - reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group behind the HubSpot breach was not disclosed. This blog will review the three breaches based on  ( 5 min )

Cybersecurity researchers have detailed a "simple but efficient" persistence mechanism adopted by a relatively nascent malware loader called Colibri, which has been observed deploying a Windows information stealer known as Vidar as part of a new campaign. "The attack starts with a malicious Word document deploying a Colibri bot that then delivers the Vidar Stealer," Malwarebytes Labs said in an  ( 3 min )

The U.S. Department of Justice (DoJ) announced that it neutralized Cyclops Blink, a modular botnet controlled by a threat actor known as Sandworm, which has been attributed to the Main Intelligence Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU). "The operation copied and removed malware from vulnerable internet-connected firewall devices that Sandworm used  ( 3 min )

VMware has released security updates to patch eight vulnerabilities spanning its products, some of which could be exploited to launch remote code execution attacks. Tracked from CVE-2022-22954 to CVE-2022-22961 (CVSS scores: 5.3 - 9.8), the issues impact VMware Workspace ONE Access, VMware Identity Manager, VMware vRealize Automation, VMware Cloud Foundation, and vRealize Suite Lifecycle Manager  ( 3 min )

Cisco warnt in mehreren Sicherheitsmeldungen vor Lücken in den Produkten. Außerdem listet das Unternehmen von der Spring-Framework-Lücke betroffene Lösungen.  ( 4 min )

Mehrere VMware-Produkte sind von teils kritischen Lücken betroffen, durch die Angreifer Schadcode einschleusen könnten. Es gibt Updates und Gegenmaßnahmen.  ( 4 min )

Mehrere Produkte von Fortinet mit teils kritischen Sicherheitslücken ermöglichten Angreifern, etwa Schadcode einzuschleusen. Updates dichten die Lücken ab.  ( 4 min )

American cybersecurity company Palo Alto Networks warned customers on Wednesday that some of its firewall, VPN, and XDR products are vulnerable to a high severity OpenSSL infinite loop bug disclosed three weeks ago [...]  ( 3 min )

A new information stealer named FFDroider has emerged, stealing credentials and cookies stored in browsers to hijack victims' social media accounts. [...]  ( 4 min )

British retail chain The Works announced it was forced to shut down several stores due to till issues caused by a cyber-security incident involving unauthorized access to its computer systems. [...]  ( 3 min )

VMware has warned customers to immediately patch critical vulnerabilities in multiple products that could be used by threat actors to launch remote code execution attacks. [...]  ( 3 min )

An ongoing outage affects numerous Atlassian customers, causing their Jira and Confluence instances to not be accessible for over twenty-four hours. [...]  ( 4 min )

US government officials announced today the disruption of the Cyclops Blink botnet controlled by the Russian-backed Sandworm hacking group before being used in attacks. [...]  ( 4 min )

Microsoft has reminded customers that multiple .NET Framework versions signed using the insecure Secure Hash Algorithm 1 (SHA-1) will reach their end of life this month. [...]  ( 3 min )

AMD is investigating an issue in its GPU software suite that causes an auto-adjustment of AMD Ryzen CPU performance settings for users without permission. [...]  ( 4 min )

The U.S. Department of the Treasury's Office has announced sanctions against the cryptocurrency exchange Garantex, which has been linked to illegal transactions for Hydra Market. [...]  ( 4 min )

US chipmaker Intel announced Tuesday night that it had suspended all business operations in Russia, joining tech other companies who pulled out of the country due to the invasion of Ukraine. [...]  ( 3 min )

The Australian Competition & Consumer Commission has published an announcement to raise awareness about a spike in money recovery scams. [...]  ( 4 min )

One hopes they can stay online long enough for customers to evaluate Atlassian opened its Las Vegas Team '22 event this week with products aimed at giving management an insight into projects – and developers an insight into what is actually going on.…  ( 8 min )

Sensitive info swiped from Windows and Android devices, according to report A prolific Middle East team with links to Hamas is said to be using malware and infrastructure to target high-ranking Israeli officials and steal sensitive data from Windows and Android devices.…  ( 9 min )

'Routine maintenance script' blamed for derailed service for unlucky customers Atlassian's Jira and Confluence issue tracking and collaboration services have been down for some customers for two days now and the outage remains ongoing.…  ( 8 min )

Control systems scrubbed, hijacked network devices need to be patched and cleaned The US Justice Department today revealed details of a court-authorized take-down of command-and-control systems the Sandworm cyber-crime ring used to direct network devices infected by its Cyclops Blink malware.…  ( 8 min )

A new arms race emerges DARPA announced a second successful test of its hypersonic cruise missile, adding that the weapon, capable of speeds in excess of Mach 5, is ready for real-world use. …  ( 8 min )

Pieter Abbeel may not be a name you know, but you've probably heard of his work This year's ACM Prize in Computing is going toward a machine learning specialist whose work, even if you haven't heard of him, is likely to be familiar.…  ( 7 min )

Hoarding a bunch of data that 'may prove useful' someday? Data-wrangling product is aimed at you Google has announced a preview on Google Cloud of BigLake, a data lake storage service that it claims can remove data limits by combining data lakes and data warehouses.…  ( 8 min )

DevOps platform tells devs it is ‘continuing to work on a longer-term fix’ DevOps outfit CircleCI is suffering from performance issues that have been ongoing for most of the day, with developers left waiting for the platform to come back online.…  ( 8 min )

Leak highlights worker offboarding policies as SaaS use grows A former employee with Block used the digital financial services firm's Cash App products to access and download personal information about US customers in December 2021, the firm has claimed.…  ( 10 min )

Points to on-prem pain with legacy systems, rising maintenance costs Boeing has decided that when it comes to the cloud there's no reason to limit itself to just one of the big public cloud players, so instead it chose all three.…  ( 8 min )

Service 'likely to have a significant impact on market for provision of broadband internet access' France's Conseil d'Etat court is revoking the license [PDF] authorizing Elon Musk's Starlink outfit to use two frequency bands to provide satellite internet in France.…  ( 8 min )

The same architecture as the top-ranked "Fugaku" supercomputer with services bundled Fujitsu has confirmed it will be opening access to the same system architecture underpinning the global top supercomputer, "Fugaku" via an emerging cloud service.…  ( 9 min )

Pop quiz: you've got your own edge computer in space. What do you do with it? Microsoft is making a deal with satellite infrastructure outfit Loft Orbital to integrate some of the Windows-maker's cloud technology.…  ( 9 min )

Some 1,200 of chipmaker's employees based in Russia, a country accounting for 0.1% of global chip sales in 2021 Intel is temporarily halting all business operations in Russia following the decision a little more than a month ago to pause sales to both Russia and its puppet state Belarus.…  ( 8 min )

Cramming a full Windows desktop into a teeny tiny space Windows 10 – as we pointed out last week – still rules Microsoft's user base, as now evidenced by the latest arrival of Windows 10 IoT Enterprise on NXP hardware.…  ( 8 min )

Is that... a good or bad thing? Deep-learning algorithms have shown themselves equal to humans in detecting patients at high-risk of developing Type-2 diabetes by analyzing CT scans of their pancreases, according to a research paper published on Tuesday.…  ( 8 min )

Plus: Big Tech company pays a little bit more tax shock Spare a thought for Microsoft's British tentacle. It reported surging local revenues for fiscal 2021 yet profits shrunk, according to financial accounts.…  ( 8 min )

So says High Court after appeal from rights org dismissed A privacy rights org this week lost an appeal [PDF] in a case about the sharing of Bulk Personal Datasets (BPDs) by MI5, MI6, and GCHQ with foreign intelligence agencies.…  ( 11 min )

About 35-40 per cent of iGiant's desktop OS installs potentially vulnerable, says Intego Apple last week patched two actively exploited vulnerabilities in macOS Monterey yet has left users of older supported versions of its desktop operating system unprotected.…  ( 9 min )

Regulator rules ban on in-app links to payment options that don't touch the Play Store is not in the spirit of the law South Korea's Communications Commission has determined that Google has not complied with the nation's law – the first of its kind in the world – requiring operators of app stores to allow third-party payments.…  ( 8 min )

Increases regulation on operators to stop money laundering and terror funding Singapore's Monetary Authority (MAS) has opined that all transactions involving digital tokens carry higher inherent money laundering and terrorist funding risks, and introduced new regulations so that local players are less likely to facilitate such crimes.…  ( 8 min )

US has over half the market, Japan is a tale of woe China finished 2021 holding just four per cent of global semiconductor market, research firm IC Insights stated on Tuesday.…  ( 8 min )

Drones, delivery-bots and robo-sprayers at work in locked-down megacity State-controlled media in China is proudly reporting the use of robots to facilitate the “temporary closed-off management” of Shanghai, which has experienced a new surge of COVID.…  ( 8 min )

'Just the beginning of our Windows and Microsoft cloud integration' says Windows boss Microsoft has revealed plans to make cloudy Windows 11 PCs easily available from, and integrated with, its flagship OS on physical PCs, and hinted at much more integration between Redmond's desktop operating system and its clouds.…  ( 9 min )

US also charges Russia-based web host owner regarding cyber-crime market US and German federal agencies came down hard on Hydra, the longest-running known dark-web marketplace trafficking in illegal drugs and money-laundering services, with a multi-pronged attack that aimed to cut off multiple heads of the nefarious online beast.…  ( 8 min )

Amazingly SpaceX isn't on the list Amazon's proposed broadband satellite constellation, Project Kuiper, has inched closer to making it into orbit, even if some of the rockets it intends to use have yet to take their first flights.…  ( 8 min )

Apples AirTag-Tracker werden den Protokollen zufolge hauptsächlich für Diebstähle und Stalking zweckentfremdet, wobei wohl vor allem Frauen zum Ziel werden.  ( 4 min )

Ein Leitfaden soll Nutzer von Google Chrome durch die Einstellungen zum Datenschutz führen. In den nächsten Wochen soll der Leitfaden im Browser verfügbar sein.  ( 3 min )

Atlassian stellt vier neue Tools vor. Ein Data Lake bündelt künftig Daten aus allen Atlassian-Anwendungen, Teams und Entwickler sollen noch effizienter werden.  ( 4 min )

Der Zeitplan für das große Update der Blogsoftware steht fest, auch, wie es aussehen soll. Erst einmal haben die Entwickler in Version 5.9.3 Fehler behoben.  ( 4 min )

Spieletaugliche Grafikkarten kosten nicht mehr unbedingt ein Vermögen – erste Modelle von AMD und Nvidia halten sich sogar an die offiziellen Preisempfehlungen.  ( 5 min )

Aktiv ausgenutzte Lücken hat Apple nur in iOS 15 und macOS 12 gestopft. Sicherheitsforschern zufolge sind aber auch ältere Betriebssystemversionen verwundbar.  ( 4 min )

In Cookie-Bannern muss man sich oft durch zahlreiche Ebenen klicken. Das soll jetzt zumindest bei Google ein Ende haben, sagt Hamburgs Datenschützer.  ( 3 min )

In Tails 4.29 haben die Maintainer die zentralen Anwendungen aktualisiert. Die Beta von Tails 5.0 liefert jedoch einen Ausblick in die Zukunft.  ( 4 min )

Die nächste Edition der Programmiersprache soll einfacher zu lernen sein und Erweiterungen für das Async/Await-Pattern mitbringen.  ( 5 min )

Die Online-Konferenz zur Web-API-Entwicklung findet am 27. April 2022 statt. Noch gilt der Frühbucherrabatt, durch den man ordentlich sparen kann.  ( 4 min )

Das ETL-Framework soll Data Engineers das aufwendige Erstellen, Betreiben und Warten von Daten-Pipelines erleichtern.  ( 4 min )

Da es für die Verarbeitung personenbezogener Daten von Facebook-Fanpages keine wirksame Rechtsgrundlage gibt, sollen Landesbehörden ihre Fanseiten abschalten.  ( 3 min )

Wer einen Desktop-PCs mit Ryzen-Prozessor und Radeon-Grafikkarte verwendet, sollte ein Blick auf die BIOS-Einstellungen werfen. Die CPU könnte übertaktet sein.  ( 4 min )

Welche Programmiersprachen nutzen Hacker und Cracker? Ergebnisse des ersten quantitativen Survey bei Deutschlands größter Organisation für Informationsfreiheit.  ( 7 min )

Hier beschreiben wir, worum es geht: Unterrichten. Ein Fokus, der viele hier veröffentlichte Beiträge prägt und über dessen Relevanz sich fast alle einig sind.  ( 5 min )

Programmier-Erfahrene in anderen Sprachen erhalten an drei Tagen einen umfassenden, praxisorientierten Einstieg in Python. Noch einige Plätze frei.  ( 3 min )

Mit dem Update des Webbrowsers Vivaldi ist die Suchmaschine Qwant integriert. Außerdem soll eine Datenschutz-Statistik Informationen zum Werbetracking liefern.  ( 4 min )

Bestimmten Apps ist es erlaubt, ihre Abokosten ohne Opt-in durch den Nutzer zu erhöhen. Das sei "ein Versuch", bestätigte Apple.  ( 4 min )

Neue Aufgaben für iPhone und iPad • macOS 12 auf alten Macs • Mac und iPad wachsen zusammen • Test: Mac Studio und Apple Studio Display, iPhone SE 3, iPad Air 5  ( 8 min )

Zum Android-Patchday im April behebt Google zahlreiche sicherheitsrelevante Fehler. Die meisten betreffen Qualcomm-SoCs.  ( 3 min )

Lernen Sie die Vorteile von Azure AD kennen: Mit Active Directory aus der Cloud hybride Identitäten sicher verwalten. 10 Prozent Frühbucherrabatt bis 20.4.  ( 3 min )

Die World Wide Developers Conference wird trotz abklingender Pandemie erneut nicht live stattfinden. Das Online-Event startet am 6. Juni mit einer Keynote.  ( 4 min )

On a sunny morning last December, Iyus Ruswandi, a 35-year-old furniture maker in the village of Gunungguruh, Indonesia, was woken up early by his mother. A technology company was holding some kind of “social assistance giveaway” at the local Islamic elementary school, she said, and she urged him to go. Ruswandi joined a long line…  ( 24 min )

When OpenAI revealed its picture-making neural network DALL-E in early 2021, the program’s human-like ability to combine different concepts in new ways was striking. The string of images that DALL-E produced on demand were surreal and cartoonish, but they showed that the AI had learned key lessons about how the world fits together. DALL-E’s avocado…  ( 7 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. A battle is raging over long covid in children Before Jasmin got covid-19 last year, she was an especially active 10-year-old. She loved dancing, swimming, and gymnastics. “She was always upside-down, doing handstands,”…  ( 4 min )

Before Jasmin got covid-19 last year, she was an especially active 10-year-old. She loved dancing, swimming, and gymnastics. “She was always upside-down, doing handstands,” says her mother, Binita Kane. Although she only had a mild case of the virus, she developed lasting, debilitating symptoms that kept her out of school. Jasmin, now 11, has abandoned…  ( 9 min )

Communication is a vital skill for any leader at an organization, regardless of seniority. For security leaders, this goes double. Communicating clearly works on multiple levels. On the one hand, security leaders and CISOs must be able to communicate strategies clearly – instructions, incident response plans, and security policies. On the other, they must be able to communicate the importance of  ( 4 min )

Threat actors have been distributing malicious applications under the guise of seemingly harmless shopping apps to target customers of eight Malaysian banks since at least November 2021. The attacks involved setting up fraudulent but legitimate-looking websites to trick users into downloading the apps, Slovak cybersecurity firm ESET said in a report shared with The Hacker News. The copycat  ( 3 min )

Ukraine's technical security and intelligence service is warning of a new wave of cyber attacks that are aimed at gaining access to users' Telegram accounts. "The criminals sent messages with malicious links to the Telegram website in order to gain unauthorized access to the records, including the possibility to transfer a one-time code from SMS," the State Service of Special Communication and  ( 3 min )

Block, the company formerly known as Square, has disclosed a data breach that involved a former employee downloading unspecified reports pertaining to its Cash App Investing that contained information about its U.S. customers. "While this employee had regular access to these reports as part of their past job responsibilities, in this instance these reports were accessed without permission after  ( 3 min )

The U.S. Treasury Department on Tuesday sanctioned Hydra, the same day German law enforcement authorities disrupted the world's largest and longest-running dark web marketplace following a coordinated operation in partnership with U.S. officials. The sanctions are part of an "international effort to disrupt proliferation of malicious cybercrime services, dangerous drugs, and other illegal  ( 4 min )

In this series of articles, we highlight design patterns and techniques to design better interfaces. You can also find more examples in [“Smart Interface Design Patterns”](https://smart-interface-design-patterns.com/), a 6h-video course with 100s of hand-picked examples, curated by Vitaly.  ( 23 min )

[Devs For Ukraine](https://www.devsforukraine.io/) is a free online charity conference organized by the lovely people at Remote. Two days filled with talks from engineering leaders around the globe, in support of Ukraine. April 25–26.  ( 1 min )

Zum Android-Patchday im April behebt Google zahlreiche sicherheitsrelevante Fehler. Die meisten betreffen Qualcomm-SoCs.  ( 3 min )

Some in tech industry are ecstatic: 'A historic step forward' and timing 'couldn't be any better' The US State Department this week launched an agency responsible for developing online defense and privacy-protection policies and direction as the Biden administration seeks to integrate cybersecurity into America's foreign relations.  …  ( 11 min )

Filter list reportedly would block 'living wage,' 'pay rises,' 'restroom,' etc Amazon allegedly planned an internal messaging app that filtered words like "union," "pay rise," and "ethics," alongside challenging and offensive terms, but after public disclosure of the project, the biz told The Register the software has not been approved and may never be deployed.…  ( 9 min )

Not just about revenue figures, we're told: Investment in staff and services matters, too Exclusive  While Nvidia is becoming a vertically integrated business by owning several core computing technologies, the GPU giant still relies on third-party companies to sell most of its wares, which is why it goes to great lengths to incentivize and recognize the contributions of these partners.…  ( 9 min )

I'm sorry, Dave, I'm afraid you can't go out dressed like that Video  From the department of "we've got this supercomputer on the space station, what shall we do with it?" comes news of AI technology being used to check the gloves of spacewalkers.…  ( 8 min )

Updates inspected for security blunders before some git can exploit them GitHub is aiming to help users avoid inadvertent leaks of confidential objects like access tokens by scanning repository content for such secrets before a git push is executed.…  ( 8 min )

Millions of rows per second in real time, so the legend goes... A data analytics company claiming to be able to process millions of rows per second, in real time, has just closed out a Series A funding round to take-in $37 million.…  ( 7 min )

US sanctions force company to sell Honor and x86 units, current and retired staff bask in those profits Flush from the sale of various business units, Huawei has distributed a whopping $9.65 billion dividend to current and retired staff under its Employee Shareholders Scheme (ESS).…  ( 8 min )

RUSI argues for collaboration, while others note all 'scans' compromise secure encryption End-to-end encryption (E2EE) has become a global flashpoint in the ongoing debate between the security of private communications versus the need of law enforcement agencies to protect the public from criminals.…  ( 9 min )

Technology is one part of a larger jam-resistant satellite scheme, important for warfare Boeing has hit a milestone with its anti-jam satellite communications.…  ( 8 min )

Gelsinger's firm drops details on crypto chip – including hash rate of up to 580GHps Intel has disclosed more details of its Blockscale ASIC, the firm's entry into the realm of cryptocurrency mining with a dedicated chip built to provide users with energy-efficient hashing for proof-of-work consensus networks.…  ( 8 min )

Syria, Sudan, Belarus, Ukraine came top. Are you starting to see a pattern? In an analysis of 3,356 fixed-line broadband deals in 220 countries, price comparison website Cable.co.uk found that the UK has the 92nd cheapest internet, beating the US, which came in 134th place.…  ( 8 min )

Linux slinger's gear can now look after ███ ███ ███ in secure ███ ███ Linux slinger Red Hat has achieved Common Criteria certification for Red Hat Enterprise Linux 8.2.…  ( 8 min )

For this energy-efficient mega-PaLM, you gotta hand it to them Though AI models will continue to get increasingly more powerful the larger they become, performance improvements from scale have not yet plateaued, according to researchers at Google.…  ( 9 min )

Big iron also claimed to be 'quantum-safe' to protect against future hacks IBM has lifted the covers off the z16, the newest member of its Z Series mainframe family which focuses on the financial services industry with a new processor that has built-in AI acceleration for real-time fraud detection.…  ( 10 min )

Judge ponders battle royale between all three to avoid unhelpful overlaps Proceedings in the legal dispute between Epic Games and Apple have bogged down in Australia, and won't reach a courtroom until 2024.…  ( 9 min )

Move is supposed to be double-plus good for supply-chain security Google is planning to tighten the security around its open source Go programming language by requiring two Google employees to be involved in code changes, where previously only one approver needed to be company-affiliated.…  ( 9 min )

Customers in Indonesia promised warning of wobbles sooner than is otherwise possible Xiaomi has added an earthquake alert system to some of its smartphones, starting with a trial in Indonesia, as a result of a collaboration between the smartphone maker and Indonesian and Chinese government-supported agencies.…  ( 9 min )

Crooks used RAT to hijack superusers at India's Mahesh Bank, stole millions An Indian bank that did not have a valid firewall license, had not employed phishing protection, lacked an intrusion detection system and eschewed use of any intrusion prevention system has, shockingly, been compromised by criminals who made off with millions of rupees.…  ( 8 min )

This matters for China – and for HPE, Intel … and possibly Apple A consortium led by Chinese government-backed Beijing Jianguang Asset Management Co. Ltd (JAC Capital) has injected $9.4 billion into ailing Chinese chipmaker Tsinghua Unigroup, in a deal that will be appreciated by many big tech industry players.…  ( 8 min )

'Up to 50%' better price-performance than x86 equivalents claimed Microsoft claims its latest Arm-powered Azure virtual machines can provide up to 50 percent better price-performance than similar instances using x86 processors.…  ( 9 min )

'Up to 50%' better price-performance than x86 equivalents ... Well, 2% is still up to 50%, we guess Microsoft claims its latest Arm-powered Azure virtual machines can provide up to 50 percent better price-performance than similar instances using x86 processors. The keywords here are "up to" as it matters whether or not you're relying on hyperthreading on the x86 systems.…  ( 9 min )

Staff socially engineered into handing over internal system credentials Mailchimp has confirmed a miscreant gained access to one of its internal tools and used it to steal data belonging to 100-plus high-value customers.…  ( 9 min )

Everything's bigger in Texas, even the flying package-slinging robots Wing will this Thursday launch a commercial drone delivery service in a major US metropolitan area, a first for the Alphabet-owned startup.…  ( 8 min )

Cash App is notifying 8.2 million current and former US customers of a data breach after a former employee accessed their account information. [...]  ( 3 min )

Security researchers have uncovered a long-running malicious campaign from hackers associated with the Chinese government who are using VLC Media Player to launch a custom malware loader. [...]  ( 4 min )

Roughly one out of six organizations worldwide that are impacted by the Spring4Shell zero-day vulnerability have already been targeted by threat actors, according to statistics from one cybersecurity company. [...]  ( 3 min )

Microsoft said that it's currently tracking a "low volume of exploit attempts" targeting the critical Spring4Shell (aka SpringShell) remote code execution (RCE) vulnerability across its cloud services. [...]  ( 3 min )

Microsoft has announced that Exchange, SharePoint, and Skype for Business on-premises are now part of the Applications and On-Premises Servers Bounty Program starting today. [...]  ( 3 min )

Microsoft has revealed that Window 365, the company's virtualized desktop service, will get support for new features to make it easier to use log into and work with Cloud PCs from any device. [...]  ( 3 min )

Microsoft has unveiled new Windows 11 features at today's 'Windows Powers the Future of Hybrid Work' event, including a redesigned File Explorer, new accessibility features, Focus for Windows 11, and more. [...]  ( 5 min )

Microsoft says that Windows 11 will get more security improvements in upcoming releases, which will add more protection against cybersecurity threats, offer better encryption, and block malicious apps and drivers. [...]  ( 4 min )

Microsoft has resolved a newly acknowledged issue causing Windows apps that use WebView2 to render Internet content incorrectly outside their windows after installing this month's optional preview cumulative updates.  [...]  ( 3 min )

The Computer Emergency Response Team of Ukraine (CERT-UA) has spotted new phishing attempts attributed to the Russian threat group tracked as Armageddon (Gamaredon). [...]  ( 4 min )

Microsoft has removed a compatibility hold blocking Windows 11 upgrades for Windows 10 customers after fixing a known issue leading to problems importing Internet Explorer 11 (IE11) data into Microsoft Edge. [...]  ( 3 min )

The servers of Hydra Market, the most prominent Russian darknet platform for selling drugs and money laundering, have been seized by the German police. [...]  ( 3 min )

A new WhatsApp phishing campaign impersonating WhatsApp's voice message feature has been discovered, attempting to spread information-stealing malware to at least 27,655 email addresses. [...]  ( 4 min )

Mit der Version 99 ermöglicht Firefox seinen Nutzern unter anderem, Kreditkarteninformationen im Browser zu hinterlegen und ergänzt einen Vorlese-Shortcut.  ( 4 min )

Intel wechselt bei seiner zweiten ASIC-Generation fürs Bitcoin-Mining von der eigenen Intel-4-Fertigung zu TSMCs 5 nm – die Chips werden so konkurrenzfähig.  ( 4 min )

Neue Windows Features rund um Sicherheit und Cloud sind die Hauptthemen für eine hybride Arbeitswelt zwischen Büro und Homeoffice.  ( 5 min )

Im Juni startet die Minds Mastering Machines wieder vor Ort mit 36 Vorträgen rund um aktuelle ML-Themen. Frühbuchertickets gibt es bis zum 11. April.  ( 4 min )

Der Chef von Twitter, Parag Agrawal, hat Elon Musk im Verwaltungsrat aufgenommen. Erst seit Kurzem ist Musk größter Aktionär des Unternehmens.  ( 3 min )

Facebook-Mutterkonzern Meta hat Hashtags blockiert, die mit den Gräueltaten in Butscha zusammenhingen. Mittlerweile habe Meta die Hashtags wieder freigegeben.  ( 3 min )

Die Rust Foundation stellt mit dem neuen Community Grants Program 2022 einen Mechanismus bereit, um die Rust-Entwicklergemeinde bei der Arbeit zu unterstützen.  ( 6 min )

Microsoft setzt mit dem Release auf mehr Sicherheit sowie verbessertes Dependency Management, und unterstützt beim Erstellen produktionsreifer Anwendungen.  ( 4 min )

Sechs Prozent der 16- bis 75-Jährigen hierzulande sind ohne Internet. EU-weit belegt Deutschland damit den vierten Platz, teilt das Statistische Bundesamt mit.  ( 4 min )

James Phillips verlässt Microsoft. Zuletzt leitete er die Abteilung, die sich vor allem mit KI- und Cloud-Produkten des Unternehmens beschäftigt.  ( 3 min )

Ein neuer Schub an Ryzen-Prozessoren für AMDs AM4-Plattform ist im deutschen Handel gelandet, darunter der Ryzen 5 5600. Die Ryzen-9-CPUs sind jetzt günstiger.  ( 4 min )

Nach dem Erfolg der hauseigenen Graviton-Prozessoren in der Amazon-Cloud bietet Microsoft jetzt VMs mit dem 80-Kerner Ampere Altra an.  ( 3 min )

Neben Erweiterungen für den Compiler bringt das Release eine Vorschau auf generische Typen, die auf keinen Fall Null sind, und Context Receivers.  ( 6 min )

Nach einem Einbruch beim Marketing-Mail-Anbieter MailChimp haben Cyberkriminelle versucht, per Phishing an Kryptowährungen von Krypto-Wallet-Kunden zu gelangen.  ( 4 min )

Pentests helfen, die eigene IT auf Sicherheitsprobleme zu untersuchen. Worauf es dabei ankommt, zeigt Ihnen dieser Online-Workshop. 10 Prozent Rabatt bis 19.4.  ( 3 min )

MacBook Pro M1 2021 und Pro Display XDR erreichen dauerhaft bis zu 1000 Candela – allerdings fehlt dazu eine Konfigurationsoption. Eine neue Software kann es.  ( 4 min )

In jeweils dreitägigen Seminaren für Einsteiger und Fortgeschrittene lernen Teilnehmende die Grundlagen, Besonderheiten und den praktischen Einsatz von Node.js.  ( 4 min )

Das Active Directory ist der Dreh- und Angelpunkt bei Ransomware-Angriffen. Wie man es absichert, zeigt das neue iX kompakt auf über 170 Seiten.  ( 4 min )

Neue Versionen des Webbrowsers Google Chrome schließen eine Sicherheitslücke in der JavaScript-Engine V8. Vermutlich sind Edge und Chromium ebenfalls betroffen.  ( 4 min )

Auf zwei neue Funktionen setzt IBMs z16: Der neue Mainframe soll per KI Transaktionen in Echtzeit überprüfen können und ein quantensicheres Computing bieten.  ( 5 min )

Mit der Version 99 ermöglicht Firefox seinen Nutzern unter anderem, Kreditkarteninformationen im Browser zu hinterlegen und ergänzt einen Vorlese-Shortcut.  ( 4 min )

Neue Versionen des Webbrowsers Google Chrome schließen eine Sicherheitslücke in der JavaScript-Engine V8. Vermutlich sind Edge und Chromium ebenfalls betroffen.  ( 4 min )

For many people, the concept of directed energy, or lasers, conjures images of lightsabers and bank vault security systems—the stuff of Hollywood movies. However, the fact is, lasers are commonly used in everyday life applications, from surgery to optical communications. At Technology Innovation Institute’s (TII) Directed Energy Research Center (DERC), scientists and engineers are using…  ( 12 min )

Between a series of recent high-profile cybersecurity incidents and the heightened geopolitical tensions, there's rarely been a more dangerous cybersecurity environment. It's a danger that affects every organization – automated attack campaigns don't discriminate between targets. The situation is driven in large part due to a relentless rise in vulnerabilities, with tens of thousands of  ( 6 min )

The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed. "Data theft extortion or ransomware deployment following FIN7-attributed activity at multiple organizations, as well as technical overlaps, suggests that FIN7 actors have been associated with various  ( 3 min )

Germany's Federal Criminal Police Office, the Bundeskriminalamt (BKA), on Tuesday announced the official takedown of Hydra, the world's largest illegal dark web marketplace that has cumulatively facilitated over $5 billion in Bitcoin transactions to date. "Bitcoins amounting to currently the equivalent of approximately €23 million were seized, which are attributed to the marketplace," the BKA  ( 3 min )

With the growth in digital transformation, the API management market is set to grow by more than 30%  by the year 2025 as more businesses build web APIs and consumers grow to rely on them for everything from mobile apps to customized digital services. As part of strategic business planning, an API helps generate revenue by allowing customers access to the functionality of a website or computer  ( 5 min )

A Chinese state-backed advanced persistent threat (APT) group known for singling out Japanese entities has been attributed to a new long-running espionage campaign targeting new geographies, suggesting a "widening" of the threat actor's targeting. The widespread intrusions, which are believed to have commenced at the earliest in mid-2021 and continued as recently as February 2022, have been tied  ( 3 min )

Email marketing service Mailchimp on Monday revealed a data breach that resulted in the compromise of an internal tool to gain unauthorized access to customer accounts and stage phishing attacks.  The development was first reported by Bleeping Computer. The company, which was acquired by financial software firm Intuit in September 2021, told the publication that it became aware of the incident  ( 3 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added the recently disclosed remote code execution (RCE) vulnerability affecting the Spring Framework, to its Known Exploited Vulnerabilities Catalog based on "evidence of active exploitation." The critical severity flaw, assigned the identifier CVE-2022-22965 (CVSS score: 9.8) and dubbed "Spring4Shell", impacts Spring  ( 3 min )

Whether you work in-house or for an external agency, we all share one challenge — dealing with stakeholders, be they your boss, colleagues, or clients. In this post, veteran web designer Paul Boag shares his approach to getting things done in even the most challenging organizations.  ( 8 min )

Russian troops have also lost 676 tanks, 1,858 armored fighting vehicles, 332 artillery pieces, 107 multiple rocket launchers, 55 surface-to-air missiles, 150 jets, 134 helicopters, 7 ships, 76 fuel tanks, 94 drones, and 4 ballistic missile systems, the General Staff said on April 5. The post Ukraine’s General Staff: 18,500 Russian soldiers killed during invasion. appeared first on The Kyiv Independent.  ( 1 min )

Ursula von der Leyen and Josep Borrell will arrive in Kyiv this week, Ivan Jansa said on April 5. He also said that the embassies of the EU mission and Lithuania would return to Kyiv. The post Slovenian prime minister says European Commission president, EU foreign minister will visit Kyiv. appeared first on The Kyiv Independent.  ( 1 min )

At least 266 children have been injured, the prosecutors said on April 5. This figure does not take into account children’s casualties in front-line areas such as Mariupol in Donetsk Oblast, as well as Kyiv, Chernihiv and Luhansk oblasts. The post Prosecutor General’s Office: At least 165 children killed as a result of Russian aggression. appeared first on The Kyiv Independent.  ( 1 min )

Sumy Oblast Governor Dmytro Zhyvytsky reported on April 5 that in Konotop district of Sumy Oblast, the Ukrainian military found the bodies of at least three tortured civilians in places where Russian forces had been stationed. Russians withdrew from Sumy region on April 3. The post Bodies of tortured civilians found in Sumy Oblast. appeared first on The Kyiv Independent.  ( 1 min )

The deal is valued at $1.6 billion to provide Bulgaria with fighter jets and related support equipment. According to Reuters, U.S. officials said the sale agreement was not directly related to Russia’s war on Ukraine. The war has prompted Ukraine’s government to ask that countries with MiG aircraft – including […] The post US State Department approves potential sale of up to eight F-16 aircraft to Bulgaria. appeared first on The Kyiv Independent.  ( 1 min )

The UCC, a group representing over 1.3 million Ukrainian-Canadians, set forth the idea to include the fund in the federal government’s budget. If successful, the fund would provide additional financing for fighter aircraft, weapon systems and munitions along with a financing program similar to the Marshall Plan implemented after World […] The post Ukrainian Canadian Congress proposes a ‘Ukraine Victory Fund.’ appeared first on The Kyiv Independent.  ( 1 min )

The German software giant SAP appears to have been hypocritical about its promises to stop providing cloud services to Russian clients over Russia’s war in Ukraine. According to a document obtained by the Kyiv Independent, just a day before the company’s public announcement to shut down its cloud services in […] The post Germany’s software giant SAP keeps its Russian clients despite claims it shut down cloud services in Russia appeared first on The Kyiv Independent.  ( 3 min )

Artillery rounds hit the building seven times, according to Ukraine’s military, damaging manufacturing equipment. There’s no threat to local residents. The post Russian forces shell chemical plant in Donetsk Oblast. appeared first on The Kyiv Independent.  ( 1 min )

Sirens have been activated in the Cherkasy, Chernivtsi, Dnipropetrovsk, Donetsk, Ivano-Frankivsk, Kharkiv, Khmelnytsky, Kirovohrad, Kyiv, Lviv, Mykolaiv, Odesa, Poltava, Rivne, Sumy, Ternopil, Vinnytsia, Volyn, Zakarpattya, Zaporizhzhia and Zhytomyr oblasts and in the city of Kyiv. The post Air raid alerts go off in almost every region of Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

Editor’s note: Editorials are articles that present the opinion of the editorial team of the Kyiv Independent.  We write this editorial with difficulty. Journalists are the people of words, but right now it’s hard to find the ones to reflect what we feel.  The uncovered atrocities of Russians have left […] The post Editorial: Give Ukraine everything it asks for and now appeared first on The Kyiv Independent.  ( 5 min )

If your internet megaphone lands you in enough trouble, might as well own part of it Social media service Twitter saw its stock surge on Monday because tech thinkfluencer Elon Musk took a 9.2 percent stake in the company.…  ( 9 min )

Investors given 'materially incomplete and misleading' info, it is claimed A Mandiant shareholder has launched a legal challenge to block Google's $5.4 billion takeover of the threat intelligence firm.…  ( 9 min )

If your boss is bugging you about this tech, here's how to respond The state of the metaverse, says Forrester, is that there isn't one. Yet.…  ( 9 min )

Pat Gelsinger won't unlock most of that unless Xeon giant's stock goes sky high  ( 10 min )

Web giant's racks and appliances now generally available Google Distributed Cloud Edge (GDCE) has hit general availability.…  ( 7 min )

Thought Sacha Baron Cohen was a terrible threat actor? Get a load of this: encrypts/steals data, records audio/video and controls keyboard A new remote access trojan (RAT) dubbed "Borat" doesn't come with many laughs but offers bad actors a menu of cyberthreats to choose from.…  ( 8 min )

Semiconductor drought 'affecting all plants and models' says automaker Volvo is again blaming "chip shortages" after the company experienced a 22.1 percent drop in sales for cars in March compared to the previous year.…  ( 7 min )

Talks up 'Client-Edge-Cloud-Network-Intelligence' as it looks to consolidate lockdown gains Lenovo says it is looking to hire 12,000 workers in research and development (R&D) roles.…  ( 8 min )

Community-supported, Red Hat-compatible distro now available to Microsoft fans A Windows Subsystem for Linux-friendly version of AlmaLinux has turned up in the Microsoft Store, adding to an impressive array of options for WSL users.…  ( 7 min )

One year in, CEO Yuki Kusumi wants diversification and growth Panasonic will invest ¥600 billion ($4.89 billion) in electronic vehicle (EV) batteries, hydrogen energy, workplace digitization and supply chain software in a strategy shift for the 104-year old Japanese multinational.…  ( 8 min )

Reportedly has already sent a Q&A to Microsoft cloud rivals, customers The European Commission is starting to gently probe allegations against Microsoft of anti-competitive practices in the cloud computing industry as it pertains to the company’s licensing rules.…  ( 9 min )

Strengthens SDN smarts for hyperscalers, small clouds, and maybe 5G, gives Xilinx some work too AMD has announced it will acquire networking vendor Pensando for $1.9 billion.…  ( 7 min )

We talk to some players in the Apple device management game MacAD  No, it isn't an April Fool's joke we forgot to publish. The Register* actually made it to a recent in-person Apple event: the 2022 Mac Administrator and Developer conference, MacAD. Apple, it seems, may be getting ever more serious about the enterprise.…  ( 9 min )

Customers wake to a nightmare as payment data pilfered from UK website Emma Sleep Company has confirmed to The Reg that it suffered a Magecart attack which enabled ne'er-do-wells to skim customers' credit or debit card data from its website.…  ( 9 min )

Who left that bit of rocket there? It's getting a bit crowded in orbit There was a sigh of relief from ESA controllers over the weekend as the Copernicus Sentinel-1A satellite successfully dodged a decades-old rocket fragment.…  ( 7 min )

The language wars were fun, but they're done Opinion  Here's a recipe for happiness. Don't get overexcited by the latest "C is not a language" kerfuffle.…  ( 9 min )

Beware the terminated techie: Revenge is a dish best preceded by an asterisk Who, Me?  With The Great Resignation upon us, depending on which survey you read, we present a reminder that when a programmer has to go… just let them go. Or face whatever form their vengeance might take. Welcome to Who, Me?…  ( 8 min )

Unusual move sees regulator open consultation on access to audit documents China's Securities Regulatory Commission has opened a consultation on revised regulations aimed at avoiding trouble for local tech companies that list on US stock markets.…  ( 8 min )

Meng Wanzhou will get her regular six-month stints in the role, starting who knows when Huawei executive Meng Wanzhou – who was famously held in Canada and is the daughter of company founder Ren Zhengfei – has quietly been named as one of three people who share the role as chair of the Chinese company's board.…  ( 8 min )

Asset management outfit Macquarie will buy existing bit barns. But first, check out the shiny new 15.2MW bit barn in Indonesia Japanese giant NTT has found a friend to help it fund the planned expansion of its datacenter fleet.…  ( 8 min )

Shame it's not finished – Microsoft has promised more hybrid cloud capabilities are coming real soon now Microsoft has quietly slipped System Center 2022 out the door, more than six months after the debut of Windows Server 2022 – but also flagged the product is not in its final state.…  ( 8 min )

GitHub announced on Monday that it expanded its code hosting platform's secrets scanning capabilities for GitHub Advanced Security customers to automatically block secret leaks. [...]  ( 4 min )

Cloudflare sees signs of Russians increasingly turning to Western news sources to get accurate information about the situation in Ukraine. [...]  ( 4 min )

​​​​​​​VMWare has published a security advisory for the critical remote code execution vulnerability known as Spring4Shell, which impacts multiple of its cloud computing and virtualization products. [...]  ( 4 min )

Email marketing firm MailChimp disclosed on Sunday that they had been hit by hackers who gained access to internal customer support and account management tools to steal audience data and conduct phishing attacks. [...]  ( 4 min )

Threat analysts have compiled a detailed technical report on FIN7 operations from late 2021 to early 2022, showing that the actor is still very active, evolving, and trying new monetization methods. [...]  ( 4 min )

Content delivery networks, or CDNs, allow you to improve the delivery of your website’s static resources, most notably, with CDN caching. They do this by serving your content from edge locations, which are located all over the world. When a … Adding CDN Caching to a Vite Build originally published on CSS-Tricks. You should get the newsletter.  ( 5 min )

Tutoren des Nachhilfe-Startups Gostudent erheben schwere Vorwürfe gegen die Plattform: Es ist von Datenschutzverstößen und verspäteten Lohnzahlungen die Rede.  ( 4 min )

Ein halbes Jahr nach der Einführung des neu aufgelegten MacBook Pro vertreibt der Hersteller erstmals generalüberholte Modelle zu einem niedrigeren Preis.  ( 4 min )

Die Western Australia Police hofft, durch eine iPhone-Integration in Einsatzfahrzeuge die Sicherheit und Effizienz zu erhöhen.  ( 4 min )

Die neue Online-Konferenzreihe von DER SPIEGEL und Heise behandelt Themen wie Führungskompetenz, Zusammenarbeit in Teams sowie hilfreiche Tools und Techniken.  ( 4 min )

In einer globalen Operation haben internationale Strafverfolger 65 Verdächtige verhaftet, die betrügerische Geschäftsmails zur Abzocke von Opfern sendeten.  ( 4 min )

Am 30. Juni 2022 findet der nächste POD statt. Die vierte Auflage des Online-Events dreht sich um Scrum, Product Leadership, Moderationsskills und Streitkultur.  ( 4 min )

Dominique und Oliver Winter erläutern in dieser Folge des Produktwerker-Podcast, warum Magic Estimation für Product Owner extrem hilfreich sein kann.  ( 2 min )

Eine an die Öffentlichkeit gelangte Datenbank zu Bestellungen bei einem russischen Lieferdienst zeigt einmal mehr, wie viel die Daten verraten können.  ( 4 min )

Bei Snapchat lassen sich Youtube-Videos neuerdings als Sticker versenden. Die Funktion ist sowohl unter Android als auch unter iOS verfügbar.  ( 3 min )

Künftig stehen russischen Nutzern keine Unwetterwarnungen mehr zur Verfügung, da die Kooperation mit einem staatlichen Institut eingestellt wurde.  ( 4 min )

Die openSUSE-Entwickler arbeiten derzeit an einem neuen Installationsassistenten. Eine sehr frühe Version des D-Installers lässt sich jetzt ausprobieren.  ( 4 min )

Die populäre Mac-App kommt mit einem überarbeiteten Interface und zahlreichen neuen "Blocks" zur Live-Verarbeitung von Audio.  ( 4 min )

Angriffsvektoren in der eigenen Unternehmens-IT mit Hacker-Mitteln aufdecken und beseitigen lernen. Online-Schulung an 2 Tagen, mit 10 Prozent Rabatt bis 21.4.  ( 3 min )

Java-Software-Entwickler und -architekten erhalten handfeste Programmierpraxis zu den diversen JDK-APIs für Parallelität. 10 % Frühbucherrabatt bis 18.4.  ( 3 min )

In den Niederlanden standen am Sonntag plötzlich die meisten Züge still. Ein wichtiger Teil des Verkehrsleitsystems hat verrücktgespielt.  ( 4 min )

The daring Chinese biophysicist who created the world’s first gene-edited children has been set free after three years in a Chinese prison. He Jiankui created shock waves in 2018 with the stunning claim that he’d altered the genetic makeup of IVF embryos and implanted them into a woman’s uterus, leading to the birth of twin…  ( 4 min )

A bleak new report from the UN’s climate panel underscores the price the world is paying for the long delays in addressing global warming despite decades of warnings. Last year, worldwide energy-related carbon dioxide topped 36 billion tons, setting a new record as the global economy sprang back from the depths of the pandemic. As…  ( 5 min )

An Android spyware application has been spotted masquerading as a "Process Manager" service to stealthily siphon sensitive information stored in the infected devices. Interestingly, the app — that has the package name "com.remote.app" — establishes contact with a remote command-and-control server, 82.146.35[.]240, which has been previously identified as infrastructure belonging to the  ( 3 min )

At least three different advanced persistent threat (APT) groups from across the world have launched spear-phishing campaigns in mid-March 2022 using the ongoing Russo-Ukrainian war as a lure to distribute malware and steal sensitive information. The campaigns, undertaken by El Machete, Lyceum, and SideWinder, have targeted a variety of sectors, including energy, financial, and governmental  ( 3 min )

A group of academics from the University of Oxford and Armasuisse S+T has disclosed details of a new attack technique against the popular Combined Charging System (CCS) that could potentially disrupt the ability to charge electric vehicles at scale. Dubbed "Brokenwire," the method interferes with the control communications that transpire between the vehicle and charger to wirelessly abort the  ( 3 min )

A previously undocumented "sophisticated" information-stealing malware named BlackGuard is being advertised for sale on Russian underground forums for a monthly subscription of $200. "BlackGuard has the capability to steal all types of information related to Crypto wallets, VPN, Messengers, FTP credentials, saved browser credentials, and email clients," Zscaler ThreatLabz researchers Mitesh Wani  ( 3 min )

A variant of the Mirai botnet called Beastmode has been observed adopting newly disclosed vulnerabilities in TOTOLINK routers between February and March 2022 to infect unpatched devices and expand its reach potentially. "The Beastmode (aka B3astmode) Mirai-based DDoS campaign has aggressively updated its arsenal of exploits," Fortinet's FortiGuard Labs Research team said. "Five new exploits were  ( 3 min )

Ever wondered how to build a paginated list that works with and without JavaScript? In this article, Manuel explains how you can leverage the power of Progressive Enhancement and do just that with Eleventy and Alpine.js.  ( 15 min )

A compromised Trezor hardware wallet mailing list was used to send fake data breach notifications to steal cryptocurrency wallets and the assets stored within them. [...]  ( 5 min )

A new remote access trojan (RAT) named Borat has appeared on darknet markets, offering easy-to-use features to conduct DDoS attacks, UAC bypass, and ransomware deployment. [...]  ( 4 min )

Für Version 2.0 der TI zur Digitalisierung des Gesundheitswesens fordern Experten eine höhere Nutzerfreundlichkeit, ein Migrationskonzept und eine Testumgebung.  ( 5 min )

Bundesinnenministerin Nancy Faeser (SPD) rüstet angesichts des Ukraine-Kriegs für digitale Gegenschläge. Die Ampel-Koalition ist an sich gegen Hackbacks.  ( 5 min )

Plus: Improving Google Search and open-source software library for more natural computer speech In brief  AI algorithms crushed eight world champions playing the card game Bridge, marking another milestone in machine learning systems becoming better than humans at specific games.…  ( 8 min )

Viasat und SentinelOne haben Details zum Cyberangriff auf KA-Sat veröffentlicht, der hierzulande Windräder lahmlegte. Sie sehen eine Botnetz-Verbindung.  ( 5 min )

Das Team der Linux-Distribution Elementary OS trennt sich. Gründerin Danielle Foré bleibt als Einzige an Bord und plant, den Fokus des Projektes zu ändern.  ( 4 min )

Cyberangreifer russischer Geheimdienste sollen die IT des ungarischen Außenministeriums unterwandert haben. Auch Nato- und EU-Dokumente seien abgeflossen.  ( 5 min )

Heute in c't uplink sprechen wir über Datenschutz bei Android: Einstellungen optimieren, Bloatware entfernen, Custom-ROMs installieren.  ( 4 min )

Plus: Hive hits health-care org, law enforcement ransomware response is lacking, and orgs can't meet new disclosure rules In Brief  Cybercriminals have used fake emergency data requests (EDRs) to steal sensitive customer data from service providers and social media firms. At least one report suggests Apple, and Facebook's parent company Meta, were victims of this fraud.…  ( 11 min )

When does this thing get to unionize? Robotics company Boston Dynamics is making one of its latest robots more generally commercially available: a mobile, autonomous arm called Stretch.…  ( 7 min )

If it can cut energy requirements for both, this idea might not stink after all Tomorrow Water, a subsidiary of Korean firm BKT, is aiming to make datacenters more environmentally friendly by colocating them with sewage treatment plants, an arrangement it claims can save both energy and water.…  ( 7 min )

It's a bug's life Video  After some careful study, it turns out the brain of an insect is pretty good at separating signal from noise.…  ( 8 min )

If decision is upheld, this 'could seriously harm FOSS and copyleft' A US federal district court decision in California favoring database biz Neoj4 is incorrect and imperils free open-source software, according to the Software Freedom Conservancy.…  ( 10 min )

White House chimes in: Folks 'in every state must have a free and fair choice' to unionize Amazon warehouse workers in New York City voted in favor of joining a trade union on Friday, marking the first-ever successful union campaign against the tech giant in its history.…  ( 8 min )

Two teenagers from the UK charged with helping the Lapsus$ extortion gang have been released on bail after appearing in the Highbury Corner Magistrates Court court on Friday morning. [...]  ( 3 min )

Yesterday, American Express users across the world including US, UK, and Europe, experienced widespread outages lasting hours, and some users continue to. BleepingComputer was able to briefly reproduce issues right before Amex confirmed partially restoring services. [...]  ( 4 min )

Yesterday, American Express users across the world including US, UK, and Europe, experienced widespread outages lasting hours, and some users continue to. BleepingComputer was able to briefly reproduce issues right before Amex confirmed partially restoring services. [...]  ( 4 min )

While ransomware is still conducting attacks and all companies must stay alert, ransomware news has been relatively slow this week. However, there were still some interesting stories that we outline below. [...]  ( 4 min )

A 15-year-old security vulnerability has been disclosed in the PEAR PHP repository that could permit an attacker to carry out a supply chain attack, including obtaining unauthorized access to publish rogue packages and execute arbitrary code. "An attacker exploiting the first one could take over any developer account and publish malicious releases, while the second bug would allow the attacker  ( 3 min )

The City of London Police on Friday disclosed that it has charged two of the seven teenagers, a 16-year-old and a 17-year-old, who were arrested last week for their alleged connections to the LAPSUS$ data extortion gang. "Both teenagers have been charged with: three counts of unauthorized access to a computer with intent to impair the reliability of data; one count of fraud by false  ( 3 min )

DevOps platform GitLab has released software updates to address a critical security vulnerability that, if potentially exploited, could permit an adversary to seize control of accounts. Tracked as CVE-2022-1162, the issue has a CVSS score of 9.1 and is said to have been discovered internally by the GitLab team. "A hardcoded password was set for accounts registered using an  ( 3 min )

Microsoft now allows enterprise admins to re-enable the MSIX ms-appinstaller protocol handler disabled after Emotet abused it to deliver malicious Windows App Installer packages. [...]  ( 4 min )

A previously unknown Android malware uses the same shared-hosting infrastructure previously seen used by the Russian APT group known as Turla, though attribution to the hacking group not possible. [...]  ( 4 min )

A previously unknown Android malware has been linked to the Turla hacking group after discovering the app used infrastructure previously attributed to the threat actors. [...]  ( 4 min )

A Mirai-based distributed denial-of-service (DDoS) botnet tracked as Beastmode (aka B3astmode) has updated its list of exploits to include several new ones, three of them targeting various models of Totolink routers. [...]  ( 4 min )

Japanese cybersecurity software firm Trend Micro has patched a high severity security flaw in the Apex Central product management console that can let attackers execute arbitrary code remotely. [...]  ( 3 min )

GitLab has addressed a critical severity vulnerability that could allow remote attackers to take over user accounts using hardcoded passwords. [...]  ( 3 min )

The European Parliament has taken the first steps for new legislation against money-laundering that covers cryptocurrency transactions, which are an important part of illicit activities today. [...]  ( 5 min )

Microsoft has added a new safeguard hold blocking Windows 11 upgrades for Windows 10 customers who don't import their Internet Explorer 11 (IE11) data into Microsoft Edge before trying to install the newest Windows version. [...]  ( 3 min )

Okta's outsourced provider of support services, Sitel (Sykes) has shared more information this week in response to the leaked documents that detailed the various incident response tasks carried out by Sitel after the Lapsus$ hack. [...]  ( 4 min )

Phishing attacks are abusing Microsoft Azure's Static Web Apps service to steal Microsoft, Office 365, Outlook, and OneDrive credentials. [...]  ( 3 min )

Fixed passphrases for OmniAuth users not such a great idea GitLab on Thursday issued security updates for three versions of GitLab Community Edition (CE) and Enterprise Edition (EE) software that address, among other flaws, a critical hard-coded password bug.…  ( 8 min )

Ferroelectric devices key for this qubit-slinging startup A Swiss quantum computing company claiming a world-first discovery has just marked what it believes is one of the largest funding rounds in the history of the quantum tech space.…  ( 8 min )

Open-source HPC suite now includes 100 full-release products The Extreme-scale Scientific Software Stack (E4S) project has released version 22.02 of its collection of software packages for developing, deploying and running scientific applications on high-performance compute (HPC) platforms.…  ( 8 min )

Pretty 'community' version of one of the best-known Linuxes in Middle Kingdom Deepin version 20.5 is the latest "Community" version of one of the best-known Chinese Linux distros, and shows an interesting blend of technological influences.…  ( 10 min )

In the meantime, Windows giant eliminates 'challenged restriction' Microsoft's attempts to have a 2021 lawsuit's claims regarding anti-competitive practices struck out were this week contested in UK courts.…  ( 8 min )

Two teenagers arrested as part of police probe into extortion group British police have charged two teenagers as part of an international investigation into the Lapsus$ cyber extortion gang.…  ( 8 min )

So long as the economy stays healthy, and supply can catch up to demand IDC forecasts that spending on compute and storage systems for cloud infrastructure will grow 21.7 percent this year compared to 2021. Spending on public clouds is also expected to pass that of non-cloud infrastructure in 2022.…  ( 9 min )

Tech’s posterchild of German industrial success must face its failures as it succumbs to midlife angst Feature  Like so many stories in the history of computing, it involves Xerox. Scientific Data Systems was sold by Xerox to IBM as part of a hardware deal. When Big Blue canned a related software project, a group of five German engineers saw an opportunity.…  ( 12 min )

Steering body calls for help to 'identify ISA gaps, build plans for future extensions' The momentum behind RISC-V is growing with the backing of tech heavyweights, but it comes with a challenge: encouraging CPU designers to stay on the same page, and to avoid the sort of fragmentation that happened in MIPS and Android.…  ( 10 min )

We can't have that contractor making us look bad Something for the Weekend  I nearly choked when I read the email. "Your eBay auction has ended. Your NFT has sold for $1 million." That's about $0.999999 million more than I thought it was worth, hence the surprise. Oh, and becoming comfortably well off was a bit of a jolt, I suppose.…  ( 12 min )

Also: Belarusian miscreants pivot to browser-in-the-browser attacks A Russian cybercrime gang has lately sent credential-phishing emails to the military of Eastern European countries and a NATO Center of Excellence, according to a Google threat report this week. …  ( 9 min )

Forrester Research is DeFi-ing current hype Analyst firm Forrester Research has had a look at Web3 – the buzzword describing blockchain-powered decentralized metaverse-y stuff – and decided there's not a lot to like.…  ( 9 min )

Company changed address to avoid probe after sending 378,553 messages Britain's data watchdog has issued an £80,000 penalty to a financial advisor that dispatched hundreds of thousands of unsolicited text messages during lockdown.…  ( 8 min )

Behold the rarest of IT skills: Tact and diplomacy On Call  Being On Call requires certain skills. Technical ability? Sure. A desire to help? Naturally. However, there are some calls where one has to dip into one's reservoirs of diplomacy. Two bytes: good. Loss of face: bad.…  ( 8 min )

And software nasty may have a VPNFilter link, too Tens of thousands of Viasat satellite broadband modems that were disabled in a cyber-attack some weeks ago were wiped by malware with possible links to Russia's destructive VPNFilter, according to SentinelOne.…  ( 11 min )

The deal is a long way from done and players can already foresee rival bids Singapore-based Effissimo Capital Management, the largest shareholder in troubled Japanese tech giant Toshiba, has signed a deal to sell its stake to American private investment firm Bain Capital – if Bain decides to launch a takeover bid.…  ( 8 min )

Managed to send material from his private email address The United States Department of Justice (DoJ) has revealed it has indicted a National Security Agency (NSA) employee for sharing top secret national security information with an unnamed person who worked in the private sector.…  ( 8 min )

Fittings open on Saturday, to make it easier to take motorized pals with you wherever you go Japanese startup Groove X will on Saturday stage fittings for a wearable sling - somewhat akin to baby carriers - designed to let owners of "Love Robots" more easily carry the machines wherever they go.…  ( 8 min )

Public agencies told to stop using overseas apps from 2025 as parallel imports approved, too Russian President Vladimir Putin has banned the purchase of foreign software – be it standalone applications or code shipping in equipment – for significant critical infrastructure projects, with limited exceptions.…  ( 8 min )

Vid-streamer iQIYI also earns a place Chinese search giant and AI cloud company Baidu has landed on the US Securities and Exchange Commission's provisional list of companies it might de-list because of opaque disclosures.…  ( 8 min )

Alphabet AI lab under fire after bosses 'dragged out' probe into abuse A former DeepMind employee has blasted the AI lab for being, in her view, "grossly inadequate" in dealing with internal sexual harassment.…  ( 8 min )

Die Eufy Video Doorbell Dual 2K überwacht den Eingangsbereich gleich mit zwei Kameras. Die App-Steuerung ist tadellos und die Videos werden lokal gespeichert.  ( 7 min )

Gegenwärtig ist das erforderliche hohe Maß an Vertrauen in den russischen Hersteller nicht gewährleistet, hat das Verwaltungsgericht Köln entschieden.  ( 4 min )

Bis einschließlich 9. Mai können sich Developer mit Vorträgen und Workshops für die nächste Ausgabe der Nürnberger Entwicklerkonferenz bewerben.  ( 3 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem Slint, Lucene, GitHub Copilot, Quarkus und CMake.  ( 3 min )

Mehr als 35.500 Schülerinnen und Schülern starten Runde eins des Jugendwettbewerbs Informatik – so viele Kinder wie noch nie.  ( 3 min )

Apple steigt umfassender in den Geschäftskundenmarkt ein, vorerst nur in den USA. Der neue Dienst umfasst Geräteverwaltung, Cloud-Speicher und mehr Support.  ( 4 min )

Über den OLED-Gaming-Monitor AW3423DW wird hitzig diskutiert. c't 3003 klärt im Test, warum.  ( 8 min )

Die neue Version von YugaByteDB soll Entwicklern durch etliche neue Features, darunter die Integration in einige Werkzeuge, die Arbeit spürbar erleichtern.  ( 6 min )

Kann Grafana Doom? Drei Entwickler des Labs stellten sich beim Hackathon im März der Challenge und liefern zum Geburtstag des Spiels die Version "Doomfana".  ( 5 min )

Das Community-Festival präsentiert ein ebenso buntes wie informatives Programm rund um Container, Microservices, DevOps und CI/CD. Jetzt Tickets sichern.  ( 5 min )

Im Rahmen des Wettbewerbs "Grand Challenge der Quantenkommunikation" erhalten Projekte rund um die sichere quantenbasierte Authentifizierung Fördermittel.  ( 4 min )

Für Qt 5.15 verlängert die Qt Company den Support um zwei Jahre, allerdings nur für Abokunden oder über einen gesondert gebuchten Extended Support.  ( 4 min )

Dieses Jahr erscheinen die ersten GPUs mit HBM3-DRAM – SK Hynix gibt aber auch schon einen Ausblick auf die Nachfolgergeneration bis zum Jahr 2028+.  ( 4 min )

Die Gitlab-Entwickler haben ein Update veröffentlicht, um Sicherheitslücken zu schließen. Eine kritische Lücke könnte Angreifern die Kontoübernahme ermöglichen.  ( 4 min )

Neue Verschlüsselungsverfahren widerstehen auch Quantencomputern. Im Workshop lernen Softwareentwickler die nötige Theorie und bekommen Tipps für die Praxis.  ( 3 min )

In Rockwell Automation Logix-Kontrollern können Angreifer Sicherheitslücken ausnutzen, um eigenen Code auszuführen. Die CISA gibt Admins Handlungsempfehlungen.  ( 4 min )

Wie wird man eigentlich der eigene Chef? Drei ganz konkrete Tipps für Leute, die ihre Arbeitsweise und Projekte gerne selbstständig in die Hand nehmen wollen.  ( 4 min )

Am 1. April 1972 gründeten einige Ex-IBMler in der kurpfälzischen Provinz das derzeit einzige deutsche Softwarehaus von Weltrang: SAP.  ( 10 min )

Das Bundesgesundheitsministerium hat gegenüber der Kassenärztlichen Bundesvereinigung bestätigt: Praxen tragen keine Schuld für Konnektoren.  ( 4 min )

Angreifer könnten im Smarthome aufgrund einer Sicherheitslücke in RaspberryMatic die Kontrolle übernehmen. Ein Update zum Absichern steht zur Verfügung.  ( 3 min )

Unter Verwendung von Systemroutinen war es möglich, Apples zentralen Account abzufischen. Der Konzern reagierte nur mit Verzögerung.  ( 4 min )

Die Betriebssystem-Updates sollen Bugs beseitigen, die iPhone- und Mac-Nutzer geplagt haben. Sicherheitslücken werden offenbar aktiv für Angriffe ausgenutzt.  ( 4 min )

The cyberattack aimed at Viasat that temporarily knocked KA-SAT modems offline on February 24, 2022, the same day Russian military forces invaded Ukraine, is believed to have been the consequence of wiper malware, according to the latest research from SentinelOne. The findings come as the U.S. telecom company disclosed that it was the target of a multifaceted and deliberate" cyberattack against  ( 3 min )

Two new security vulnerabilities have been disclosed in Rockwell Automation's programmable logic controllers (PLCs) and engineering workstation software that could be exploited by an attacker to inject malicious code on affected systems and stealthily modify automation processes. The flaws have the potential to disrupt industrial operations and cause physical damage to factories in a manner  ( 3 min )

Threat actor groups like Wizard Spider and Sandworm have been wreaking havoc over the past few years – developing and deploying cybercrime tools like Conti, Trickbot, and Ryuk ransomware. Most recently, Sandworm (suspected to be a Russian cyber-military unit) unleashed cyberattacks against Ukranian infrastructure targets. To ensure cybersecurity providers are battle ready, MITRE Engenuity uses  ( 4 min )

A Chinese advanced persistent threat tracked as Deep Panda has been observed exploiting the Log4Shell vulnerability in VMware Horizon servers to deploy a backdoor and a novel rootkit on infected machines with the goal of stealing sensitive data. "The nature of targeting was opportunistic insofar that multiple infections in several countries and various sectors occurred on the same dates," said  ( 4 min )

The North Korean state-backed hacking crew, otherwise known as the Lazarus Group, has been attributed to yet another financially motivated campaign that leverages a trojanized decentralized finance (DeFi) wallet app to distribute a fully-featured backdoor onto compromised Windows systems. The app, which is equipped with functionalities to save and manage a cryptocurrency wallet, is also designed  ( 3 min )

Networking equipment maker Zyxel has pushed security updates for a critical vulnerability affecting some of its business firewall and VPN products that could enable an attacker to take control of the devices. "An authentication bypass vulnerability caused by the lack of a proper access control mechanism has been found in the CGI program of some firewall versions," the company said in an advisory  ( 3 min )

Apple on Thursday rolled out emergency patches to address two zero-day flaws in its mobile and desktop operating systems that it said may have been exploited in the wild. The shortcomings have been fixed as part of updates to iOS and iPadOS 15.4.1, macOS Monterey 12.3.1, tvOS 15.4.1, and watchOS 8.5.1. Both the vulnerabilities have been reported to Apple anonymously. Tracked as CVE-2022-22675,  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Droughts are cutting into California’s hydropower. Here’s what that means for clean energy. The droughts that swept across the western US in 2021 sparked wildfires and damaged crops. But the historic lack of…  ( 4 min )

The droughts that swept across the western US in 2021 sparked wildfires and damaged crops. But the historic lack of water also had an impact on one of California’s key sources of renewable energy: hydropower. Electricity generation from California hydropower plants was down 48% from the 10-year average, according to new data from the Energy…  ( 3 min )

Die Gitlab-Entwickler haben ein Update veröffentlicht, um Sicherheitslücken zu schließen. Eine kritische Lücke könnte Angreifern die Kontoübernahme ermöglichen.  ( 4 min )

In Rockwell Automation Logix-Kontrollern können Angreifer Sicherheitslücken ausnutzen, um eigenen Code auszuführen. Die CISA gibt Admins Handlungsempfehlungen.  ( 4 min )

Angreifer könnten im Smarthome aufgrund einer Sicherheitslücke in RaspberryMatic die Kontrolle übernehmen. Ein Update zum Absichern steht zur Verfügung.  ( 3 min )

Die Betriebssystem-Updates sollen Bugs beseitigen, die iPhone- und Mac-Nutzer geplagt haben. Sicherheitslücken werden offenbar aktiv für Angriffe ausgenutzt.  ( 4 min )

Next.js’ recent 12.0 release included a new beta feature: middleware. For a detailed explanation, you can read all about it in Sam’s previous article, “[Next.js Wildcard Subdomains](https://www.smashingmagazine.com/2021/11/nextjs-wildcard-subdomains/)”. This article, on the other hand, dives into the overall concept of middleware and how handy it can be in building things.  ( 6 min )

Nothing like a little kernel-level memory snooping, code execution Apple has released updates for its mobile and desktop operating systems to patch security holes that may well have been exploited in the wild.…  ( 7 min )

Uni trio probe efforts by miners to max out rewards at expense of others UC Berkeley boffins have found that strategies for squeezing extra profit out of Ethereum transactions come at the cost of other cryptocurrency investors and threaten the security and stability of the entire Ethereum ecosystem.…  ( 10 min )

Troubled container company may escape confines of its doldrums Docker hasn't just got back in the fight thanks to its latest round of funding: it's earned double-unicorn status, too. …  ( 7 min )

Lead dev of modest ground-up Unix-like OS quits job to work on it SerenityOS, which started out as a one-man project in 2018, has now got to the point where its creator proudly announced that its web browser passes the Acid3 browser test.…  ( 8 min )

Backers include SK Lubricants as dielectric fluid research partner An enterprise immersion cooling company has received a $28 million investment it plans to use to sink itself into additional customer datacenters.…  ( 8 min )

Will provide tips on spotting bad info, frontload highly cited sources Further embracing its unspoken role as arbiter of truth, Google has unrolled some new search result features to help users "sort out what information is credible and what isn't."…  ( 8 min )

You didn't have any plans for the weekend anyway, did you? Another Java Remote Code Execution vulnerability has reared its head, this time in the popular Spring Framework and, goodness, it's a nasty one.…  ( 9 min )

Chip giant wants to compete in software while playing catch-up in silicon Intel hopes to gain an extra edge in the cloud and datacenter markets with the acquisition of Granulate, a developer of software that optimizes complex and old workloads for modern CPUs.…  ( 9 min )

RPA vendor's recurring revenue for 2023 will be down by $15m after pausing Russia operations UiPath's CEO has said the war in Ukraine is "having a profound impact" on business confidence in Europe and the UK.…  ( 8 min )

Reverse engineering yields sticky microarchitectural vulnerabilities Nvidia's ultra-dense GPU-driven AI training and inference systems are prone to covert and side channel attacks, according to research just published from a team led by Pacific Northwest National Laboratory (PNNL). This might be less concerning for those with on-prem DGX systems, but for cloud vendors selling time on the AI training boxes, the vulnerabilities are worth noting.…  ( 9 min )

Confused? Don’t be – Intel flagged this when it married Evo and vPro a while back Dell has refreshed its business laptops, predictably enough adding 12th-gen Intel silicon while also trying to make its offerings in a very well established product category stand out.…  ( 8 min )

Uses 64-node cluster of classical HPC boxen to prove it Fujitsu says it has developed the world's fastest quantum simulator capable of handling 36 qubit quantum circuits. The firm will use this to speed development of quantum applications, and said it is already planning a further simulator capable of handling more qubits.…  ( 8 min )

Windows 10 still rules the roost among Microsoft fans, according to AdDuplex The growth of Microsoft's flagship operating system, Windows 11, appears to be slowing if figures from AdDuplex are to be believed.…  ( 8 min )

GNOME 42 and some other small changes for both... though we still miss Unity Late April should see the release of the 36th versions of two of the biggest Linux distros: Fedora 36 and Ubuntu 22.04.…  ( 10 min )

'We have this small moment in time where we can make improvements in our defensive posture' The US and its NATO allies should expect a "long tail of retaliation," in the form of cyberattacks, for the sanctions imposed on Russia, says cloud security shop ExtraHop's CEO Patrick Dennis.…  ( 10 min )

Questions linger over Technology Sourcing Programme after 2nd supplier in a week awarded significant extensions for historic contract UK tax authority HMRC has awarded Fujitsu a £250m contract for managed desktop services (MDS), extending a deal that dates back to 2017.…  ( 8 min )

Hosting platforms required to report content creators' names and income to stymie tax dodges China's massive live-streaming industry is the next target of Beijing's tech regulation blitz, with three government agencies announcing a requirement for operators to register in an attempt to eliminate tax evasion.…  ( 8 min )

Architecture may make it possible to train one machine-learning model that performs all sorts of tasks Google says it is developing an AI architecture that can be used to train one giant system capable of performing multiple different tasks more efficiently than today's models.…  ( 9 min )

Your cloudy server will not self-destruct – even if the hardware it runs on does Amazon Web Services has added a small but important resilience feature: instances in its Elastic Computing Cloud (EC2) now include automatic recovery by default.…  ( 8 min )

Oh look, someone else who thinks on-prem is old hat Cryptocurrency mining groups that typically have targeted on-premises servers are now competing fiercely for servers in the cloud.…  ( 10 min )

Foundry giant's staff could be sleeping at work during new COVID lockdown Chipmaking giant TSMC says China's COVID lockdowns slowed PC and smartphone demand, but given the Taiwanese outfit already struggles to meet demand, company chair Mark Liu was unfussed by the dip.…  ( 8 min )

Speech also alleges Russian troops in Ukraine have mutinied, shot down own plane The director of UK intelligence agency Government Communications Headquarters (GCHQ), Sir Jeremy Fleming, has warned that China is trying to introduce "undemocratic values as the default for vast swathes of future tech and the standards that govern it."…  ( 10 min )

Think tank fears future studies of this sort may be harder as social networks withdraw data Russia, Iran and Saudi Arabia are the top three proliferators of state-linked Twitter misinformation campaigns, according to a report released Wednesday by the Australian Strategic Policy Institute (ASPI).…  ( 9 min )

Better late than never – all its global and Chinese hyperscale rivals are already there Alibaba Cloud has opened its first datacenter in South Korea.…  ( 8 min )

Ill-gotten gains bankrolled swish life of flash cars and real estate A now-former finance director stole tablet computers and other equipment worth $40 million from the Yale University School of Medicine, and resold them for a profit.…  ( 8 min )

Slap-a-teacher and smash-the-school crazes were carefully engineered smears, it is claimed Facebook parent Meta, which has been struggling to compete against TikTok, has reportedly been paying a Republican-oriented consulting firm to encourage negative media reports about the Chinese-owned rival.…  ( 10 min )

Better late than never The widely used Zlib data-compression library finally has a patch to close a vulnerability that could be exploited to crash applications and services — four years after the vulnerability was first discovered but effectively left unfixed.…  ( 9 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal civilian agencies on Thursday to patch a critical Sophos firewall bug and seven other vulnerabilities within the next three weeks, all exploited in ongoing attacks. [...]  ( 3 min )

A new information-stealing malware named BlackGuard is winning the attention of the cybercrime community, now sold on numerous darknet markets and forums for a lifetime price of $700 or a subscription of $200 per month. [...]  ( 5 min )

Network equipment company Zyxel has updated the firmware of several of its business-grade firewall and VPN products to address a critical-severity vulnerability that could give attackers administrator-level access to affected devices. [...]  ( 3 min )

Apple has released security updates on Thursday to address two zero-day vulnerabilities exploited by attackers to hack iPhones, iPads, and Macs. [...]  ( 3 min )

A newly discovered data wiper malware that wipes routers and modems has been deployed in the cyberattack that targeted the KA-SAT satellite broadband service to wipe SATCOM modems on February 24, affecting thousands in Ukraine and tens of thousands more across Europe. [...]  ( 5 min )

A newly discovered data wiper malware that wipes routers and modems has been loosely linked to the cyberattack that targeted the KA-SAT satellite broadband service on February 24, affecting thousands in Ukraine and tens of thousands across Europe. [...]  ( 4 min )

The Chinese APT group known as Deep Panda has been spotted in a recent campaign targeting VMware Horizon servers with the Log4Shell exploit to deploy a novel rootkit named 'Fire Chili'. [...]  ( 4 min )

Spring released emergency updates to fix the 'Spring4Shell' zero-day remote code execution vulnerability, which leaked prematurely online before a patch was released. [...]  ( 3 min )

Curiosity and a love of learning are definite advantages in the cybersecurity field, and reading and learning more about the subject is just a few clicks away. The world needs more people out there fighting cybercrime. Perhaps one of them could be you. [...]  ( 5 min )

Atento has published its 2021 financial performance results, which have a massive $42.1 million dent from a ransomware attack the firm suffered in October 2021. [...]  ( 3 min )

EXCLUSIVE: A bug in the support dashboard of Palo Alto Networks (PAN) exposed thousands of customer support tickets to an unauthorized individual, BleepingComputer has learned. The exposed information included, customer names, contact information, conversations between staff and customers, firewall logs and configuration dumps. [...]  ( 4 min )

Hackers associated with the North Korean government have been distributing a trojanized version of the DeFi Wallet for storing cryptocurrency assets to gain access to the systems of cryptocurrency users and investors. [...]  ( 4 min )

Phishing actors are actively abusing Calendly to kick off a clever sequence to trick targets into entering their email account credentials on the phishing page. [...]  ( 4 min )

Reseller wie Timmunity und Alternate haben Sicherheitssoftware des russischen Produzenten aus dem Programm genommen oder gekündigt. Andere halten zu Kaspersky.  ( 5 min )

Besprechungen direkt in Docs, Bild-im-Bild-Modus für Meet, übersichtlichere Diskussionen in Spaces – Google erweitert sein Cloud-Office Workspace deutlich.  ( 4 min )

Durch Zugriff auf Mail-Adressen von Strafverfolgern konnten Hacker offenbar Nutzerdaten bei Diensten abfragen. In Notfällen werden Daten schnell herausgegeben.  ( 4 min )

Nur 1,5 Jahre hat das chinesische Start-up Moore Threads benötigt, um eigene Grafikkarten herzustellen. Zu den Geldgebern gehören chinesische Tech-Riesen.  ( 4 min )

Die GParted-Entwickler haben ihr minimalistisches Linux-System GParted Live mit ihrer Partitionsverwaltungssoftware auf den neuen Stand 1.4.0 gebracht.  ( 3 min )

Auf Druck von Regulierern erlaubt Apple sogenannten "Reader"-Apps das Setzen eines einzelnen externen Links zur Account-Verwaltung. Die Auflagen sind strikt.  ( 4 min )

Das Spring-Entwicklerteam stellt Patches für zwei Sicherheitslücken zur Verfügung. Daneben droht jedoch mit Spring4Shell eine weitere Gefahr.  ( 5 min )

Die neuen Werbetechniken sollen zuerst von Beta-Testern erprobt werden. Den Geltungsbereich der Datenschutzgrundverordnung scheut Google jedoch noch.  ( 4 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Weiter geht es mit dem Bau einer Architektur. Im Fokus: Benutzerfreundlichkeit.  ( 3 min )

Der renommierte Journalist und IT-Sicherheitsexperte Brian Krebs wurde vom Hersteller Ubiquiti für seine angeblich falsche Berichterstattung verklagt.  ( 5 min )

Die zweitägige Schulung bereitet Sie auf Prüfungen im Rahmen der Umsetzung des § 8a (3) des BSI-Gesetzes vor. 10 Prozent Frühbucherrabatt bis 18.4.  ( 3 min )

Arbeitgeber sind zukünftig zur Arbeitszeiterfassung verpflichtet. Software-Lösungen hierfür existieren viele – rechtliche Besonderheiten auch.  ( 14 min )

Die Plattform der ehemaligen Betreiber von Gurock Software erweitert zum Start der öffentlichen Testphase die Anbindung an Issue-Tracking-Systeme.  ( 4 min )

In zwei Tagen gut vorbereitet auf die Prüfung und Zertifizierung Ihrer IT-Produkte nach deutschen und europäischen Standards wie CC, BSZ und NESAS.  ( 3 min )

Dagger setzt auf ein Modulsystem für den Continuous-Integration-Prozess. Das Projekt erhält als Starthilfe eine Finanzspritze von 20 Millionen US-Dollar.  ( 4 min )

Sarah Hoffmann, Klassenlehrerin an einer Münchner Mittelschule, über ihre Erfahrungen mit den Experience Packages des Skills for Innovation-Programms von Intel.  ( 7 min )

Der mit einer Million US-Dollar dotierte "Nobelpreis für Informatik" geht an Jack Dongarra, der seit 50 Jahren an Algorithmen für Supercomputer forscht.  ( 3 min )

Basierend auf Unikernels lassen sich mit MirageOS schlanke und potente Abbilder für virtuelle Instanzen schaffen. Version 4 bietet einige Neuerungen.  ( 5 min )

Der mit dem A13-SoC ausgestattete Bildschirm verfügt über ein ausgefeiltes Innenleben, wie eine Zerlegung durch IFixIt zeigt.  ( 4 min )

Das Online-Event am 7. April liefert einschlägiges GitOps-Know-how – vom Bereitstellen der Infrastructure-as-Code bis zum automatisierten Software-Deployment.  ( 4 min )

Die Linux-Distribution Rolling Rhino Remix liefert ein Ubuntu-System, das sich immer auf dem neuesten Stand hält – aber nicht für jeden geeignet ist.  ( 4 min )

An fünf Terminen im April und Mai können sich Admins in 20 praxisnahen Stunden zu den wichtigsten Themen rund um Microsoft 365 weiterbilden.  ( 4 min )

Seit die EU ihren Gesetzesarm bis zu den DNS-Root-Servern in den USA ausstreckte, befürchten die Betreiber staatliche Einmischung, die das Internet beschneiden.  ( 7 min )

In Berlin bekräftigten Vertreter von Bund, Ländern und Wirtschaft, künftig Verwaltungstechnik gemeinsam zu gestalten. Neue Chancen für die Tech-Szene?  ( 5 min )

The maintainers of Spring Framework have released an emergency patch to address a newly disclosed remote code execution flaw that, if successfully exploited, could allow an unauthenticated attacker to take control of a targeted system. Tracked as CVE-2022-22965, the high-severity flaw impacts Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19, and other older, unsupported versions. Users  ( 3 min )

Three security vulnerabilities have been disclosed in the popular Wyze Cam devices that grant malicious actors to execute arbitrary code and access camera feeds as well as unauthorizedly read the SD cards, the latter of which remained unresolved for nearly three years after the initial discovery. The security flaws relate to an authentication bypass (CVE-2019-9564), a remote code execution bug  ( 3 min )

Researchers have disclosed what they say is the first-ever Python-based ransomware strain specifically designed to target exposed Jupyter notebooks, a web-based interactive computing platform that allows editing and running programs via a browser. "The attackers gained initial access via misconfigured environments, then ran a ransomware script that encrypts every file on a given path on the  ( 3 min )

A Belarusian threat actor known as Ghostwriter (aka UNC1151) has been spotted leveraging the recently disclosed browser-in-the-browser (BitB) technique as part of their credential phishing campaigns exploiting the ongoing Russo-Ukrainian conflict. The method, which masquerades as a legitimate domain by simulating a browser window within the browser, makes it possible to mount convincing social  ( 4 min )

A zero-day remote code execution (RCE) vulnerability has come to light in the Spring framework shortly after a Chinese security researcher briefly leaked a proof-of-concept (PoC) exploit on GitHub before deleting their account. According to cybersecurity firm Praetorian, the unpatched flaw impacts Spring Core on Java Development Kit (JDK) versions 9 and later and is a bypass for another  ( 3 min )

Taiwanese company QNAP this week revealed that a selected number of its network-attached storage (NAS) appliances are affected by a recently-disclosed bug in the open-source OpenSSL cryptographic library. "An infinite loop vulnerability in OpenSSL has been reported to affect certain QNAP NAS," the company said in an advisory published on March 29, 2022. "If exploited, the vulnerability allows  ( 3 min )

Das Spring-Entwicklerteam stellt Patches für zwei Sicherheitslücken zur Verfügung. Daneben droht jedoch mit Spring4Shell eine weitere Gefahr.  ( 5 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. This startup wants to kick-start a molecular electronics revival In 2000, many hoped molecular electronics (using single molecules to create circuits and components) would leapfrog silicon-based circuitry to allow computer chips to keep…  ( 4 min )

In 1999, Rice University chemist Jim Tour co-founded Molecular Electronics Corporation, a company that aimed to use single molecules to make a new type of electronic memory. But Tour had even bigger dreams. In a 2000 story in Wired, he foretold a future in which molecular electronics would leapfrog silicon-based circuitry, allowing computer chips to…  ( 5 min )

Let’s welcome the new month with some new wallpapers. Designed with love by artists and designers from across the globe, they are available in versions with and without a calendar for April 2022.  ( 7 min )

In memo seen by The Register, chip giant seems to be striving for championship yoga-levels of flexibility Intel is going to tell more of its staff to return to their campus desks after many have been working from home or working in the office occasionally, judging by an internal memo sent to employees on Tuesday.…  ( 8 min )

Now for lawmakers to wrangle over the fine print The US Senate this week passed the America COMPETES Act by a bipartisan 68-28 vote, moving more than $50 billion in semiconductor industry funding closer to President Biden's desk. …  ( 8 min )

Network equipment maker insists it acted responsibly following intrusion Network equipment maker Ubiquiti on Tuesday filed a lawsuit against infosec journalist Brian Krebs, alleging he defamed the company by falsely accusing the firm of covering up a cyber-attack.…  ( 8 min )

Lower-end of the family to roll out first – and desktops will have to wait Intel hopes to compete against Nvidia and AMD in the discrete GPU market with now-launched standalone graphics chips for laptops. These components are said to feature a slew of technologies designed to provide smoother gaming experiences and faster content-creation performance.…  ( 12 min )

Open Infrastructure Foundation boasts of growth, but observers note this is mostly existing users scaling up OpenStack's 25th release brings the usual crop of new features to the open-source cloud platform, including support for DPUs, better integration with Prometheus and Kubernetes, and a handy un-delete feature for file system shares.…  ( 8 min )

A misconfigured VPN appliance is to blame It turns out the only thing Russian forces needed to knock thousands of Ukrainian satellite broadband customers offline was a misconfigured VPN.…  ( 7 min )

Mission launched during a pandemic, returned during... oh God, what now? NASA astronaut Mark Vande Hei returned to Earth today aboard a Russian Soyuz capsule and accompanied by two Russian cosmonauts.…  ( 7 min )

Miscreants deployed cryptominers, backdoors since late December, Sophos says VMware's Horizon virtualization platform has become an ongoing target of attackers exploiting the high-profile Log4j flaw to install backdoors and cryptomining malware.…  ( 9 min )

Still can't say goodbye to the legacy browser? Some cookie and COM functionality has been restored Still got that one weird corporate app that simply must use Internet Explorer? Microsoft has tweaked IE mode in its Edge browser to lure the last holdouts.…  ( 7 min )

Claim NashStore will help Russians access common apps from May 9 A group of Russian developers are planning a Google Play alternative for Android users that will give those based in the country access to paid apps and services lost due to sanctions. …  ( 7 min )

Plus: It's looking for more Metaverse engineers in Canada Meta's plans to build a 166-hectare datacenter in the Netherlands' central Flevoland province have been put on hold.…  ( 8 min )

Konica Minolta maintenance system to be installed across 10 national support companies Swedish ERP and business application provider IFS has signed global contracts with Japanese businesses Konica Minolta and Japan Airlines.…  ( 7 min )

Post Nvidia deal collapse, Intel expressed similar interest back in February SK Hynix is reportedly considering forming a consortium to acquire UK chip designer Arm, however, the idea is said to be at a very early stage of planning, and Hynix may not actually proceed with the move.…  ( 8 min )

Cloud and data centre provider's liquidity hit by pandemic, energy costs, intransigent landlords The British division of global cloud and data centre services provider Sungard Availability Services was forced into administration amid a hike in energy bills and after failing to renegotiate landlord rental rates.…  ( 8 min )

No EVs were damaged in the making of this report Researchers from the University of Oxford published details of a vulnerability in the Combined Charging System that has the potential to abort charging.…  ( 7 min )

Non-destructively expand or shrink disk partitions while they still contain data GNOME Partition Editor version 1.4 was released this week by lead maintainer Curtis Gedak.…  ( 8 min )

Gender pay gap narrows, but the US remains top of pay-packet pops Puppet has emitted its seventh annual DevOps salary report, and there is good news: the gender wage gap appears to be narrowing.…  ( 8 min )

UK and Ireland survey reveals difficulties with housekeeping The majority of UK and Ireland SAP users are finding a lack of preparedness in data management is affecting migrations from SAP ECC 6.0 to SAP S/4HANA and/or a push towards automating business processes.…  ( 8 min )

Rejects offer of flat rate payrise, calling offer a 'relative pay cut' due to inflation BT's largest union is rejecting the offer of a flat rate pay rise and threatening to start laying the groundwork for national "statutory industrial ballot action" to ratchet up the pressure on the telecoms biz.…  ( 9 min )

Multi-cloud deal 'is going to take us a little bit longer than we thought,' says CIO The United States Department of Defense has delayed awarding a contract for its massive cloud project – known as the Joint Warfighting Cloud Capability (JWCC) – until December.…  ( 8 min )

Suggests it's prudent to plan for Putin weaponizing Russian products The UK's National Cyber Security Centre (NCSC) has advised users of Russian technology products to reassess the risks it presents.…  ( 8 min )

Meanwhile, Okta squirms as further details of slow hack response emerge Extortion gang Lapsus$ may to be back at work, despite the arrest of seven alleged operatives.…  ( 9 min )

Users of Redmond's two older cloudy CDNs told that the only route to future upgrades is migration Microsoft has created a new version of its Azure Front Door content delivery network (CDN), and told users of its existing two cloudy CDNs that if they want updates the way to get them is migrating to the new product.…  ( 8 min )